Swedish Government Office Bans Employees from Using ChatGPT and Claude on Work Computers Starting October 26
The Swedish Government Office will ban the use of ChatGPT and Claude on employees' work computers starting October 26, designating Microsoft Copilot as the only approved AI tool. The ban targets the web versions on service computers, aiming to ensure employees only use approved services with contracts. Digitalization Director Mikael Wettercrantz stated on the internal network that using uncontracted AI services could have consequences for information security. Copilot has been approved for use after internal review and has enhanced its security settings, while some employees can still access ChatGPT and Claude through the office's self-built AI assistant platform. The Swedish Tax Agency and the National Board of Health and Welfare have previously implemented similar bans, and the executive office is preparing related decisions. Government agencies will centralize procurement and usage permissions to tools with signed contracts, shifting funding and data flow from open web services to contracted suppliers like Microsoft. Uncontracted model providers face pressure in public sector deployment, while platforms with compliance and data control capabilities gain priority access.
ABAB AI Insight
The Swedish Government Office had previously restricted services like DeepSeek and found employees using about ten types of open AI tools during internal audits. The Digitalization Director publicly warned about the impact of uncontracted use on information security, leading to restrictions on work computer access to reviewed tools. Copilot was chosen as an approved option with enhanced security settings, while access to ChatGPT and Claude models remains open for some employees through a self-built platform. Resources are shifting from direct web access to controlled channels and contracted suppliers. This aligns with the temporary restrictions on ChatGPT by Italy's data protection agency and the limitations on specific models by certain U.S. departments. Currently, the European public sector is distinguishing between consumer-level web access and contract-governed deployments, with Sweden synchronizing similar restrictions across multiple agencies. Essentially, this represents a regulatory shift: when public institutions handle sensitive data, inputs from uncontracted models may enter external training or storage processes. Regulation enforces a technical ban to limit usage to tools defined by data processing terms, shifting data flow and model selection from individual employee preferences to institutional contracts and security review frameworks.