Caroline Sundberg

Caroline advises boards, senior management and in-house legal teams on IT, digital and technology law, with a particular focus on situations where regulatory requirements and commercial risks intersect. Her core practice covers data protection (GDPR), digital compliance, cybersecurity and other technology-related transactions.

She has extensive experience advising on complex digital projects, including agreements relating to data-driven services, cloud solutions and artificial intelligence (AI). Caroline is frequently instructed in matters where regulatory and contractual risk need to be addressed early to avoid significant commercial and supervisory exposure.

She also regularly advises financial institutions, regulated entities and public sector bodies on risk management and regulatory considerations in connection with the procurement, implementation and use of cloud-based solutions and other digital governance.

Member of the International Chamber of Commerce – Digital Finance Committee (ICC Sweden)

Member of the Swedish Bar Association, 2013

Member of the Swedish Data Protection Forum

Member of the Board at the ITechLaw Organization

Co-author of the Nordic Yearbook of Law and Informatics 2020–2021: Law in the Era of Artificial Intelligence, 2022

Co-author of the Swedish chapter in the Global Legal Insights: AI, Machine Learning & Big Data Laws and Regulations, 2022

The Confederation of Swedish Enterprise’s EU Data Strategy and Data Sharing Report, 2021

Global Legal Insights to Artificial Intelligence, Machine Learning & Big Data, 2020

Snellman Fashion Law Review - Edition 1, 2020

Caroline is overseeing and regulary provide updates on Snellman's Digital Compliance Tracker (https://digitalcompliance.snellman.com)

This Digital Compliance Tracker has been developed by Snellman to provide an overview of key EU Regulations and Directives that are fundamental to achieving the EU’s Digital Decade goals and ensuring digital compliance. The tracker covers laws such as the GDPR, AI Act, DORA, NIS2 and Cyber Resilience Act.