It has been reported that Sweden's Government Offices are blocking direct access to ChatGPT from OpenAI and Claude from Anthropic's official computers, in response to concerns regarding information security and the use of artificial intelligence services without formal agreements. Following a security assessment, government employees were instructed to utilize Microsoft Copilot, which remains an approved artificial intelligence tool.
The restriction came into effect on October 26, 2026.
Following reports by Sveriges Radio and SVT, the Government Offices, responsible for supporting the Swedish Prime Minister and various ministries, confirmed the restrictions. Government employees are prohibited from using the browser versions of ChatGPT and Claude on their work computers outside of the organization's approved security arrangements and this decision covers these browser versions.
According to Mikael Wettercrantz, director of digitalization at the Government Offices, employees were warned through the internal staff network to avoid using artificial intelligence services without formal agreements in order to protect their information security. He also provided several examples of problematic AI tool use, which involved employees entering incorrect information into AI tools and responding to their responses.
Several concerns have been raised regarding the potential for sensitive government information to be submitted to external AI platforms without clearly defined contractual protection. A formal agreement can be used to provide service providers with details about how information can be processed, retained, and protected, as well as the conditions under which it may be accessed or used.
Microsoft Copilot remains available to government employees following a security review.
It is also reported that the Government Offices enhanced its security settings before approving the service. It is not known what specific technical changes were made during the assessment process.
Copilot's decision does not, however, establish that it is more secure inherently than ChatGPT or Claude.
The distinction is mainly determined by organisational approval, contractual arrangements and security controls. Rather than allowing unrestricted access to consumer-facing AI platforms, the Government Offices have permitted access to a reviewed service. Additionally, the restrictions do not eliminate the ability of government officials to access OpenAI and Anthropic models.
A Swedish media report indicates some employees will continue to use ChatGPT and Claude through Intric, an AI-assistant platform developed for Government Offices. This provides a controlled access route separate from the publicly available browser services. This policy reflects a wider effort among public institutions to restrict the use of artificial intelligence services that do not follow approved data protection and security policies.
The Government Offices in Sweden are not the only authority adopting such a policy. Similarly, the Swedish Tax Agency and the National Board of Institutional Care have already imposed similar restrictions on consumer artificial intelligence tools, and the Swedish Enforcement Authority is currently preparing their own decision on the matter.
Concerns have also been raised within the Swedish Transport Administration.
According to an internal review, around ten artificial intelligence services have been identified as widespread and risky across the organization. These findings indicate the difficulty of monitoring artificial intelligence tools when employees adopt services independently and without formal approval, a practice commonly associated with shadow IT, which can be difficult to control.
There is an international aspect to this issue. In February, the European Parliament disabled the use of artificial intelligence tools on work devices after determining that security was not guaranteed. However, unlike Sweden's narrower approach, the Parliament's restrictions also covered Microsoft's Copilot, which indicates that approval is determined by the security measures of each organization rather than the reputation of a particular provider.
Moreover, there is a noteworthy distinction within Microsoft's approved service, Copilot, which provides access to Anthropic models, although these models are disabled by default and must be approved by an administrator for European Union customers. In its Copilot environment, it is unclear if Anthropic's models are enabled by the Swedish Government Offices.
Consequently, some uncertainty exists regarding the degree to which services restricted to staff computers will be permitted through Microsoft's platform as compared to those restricted to staff computers.
Additionally, the decision raises concerns about data handling for organizations and individuals outside government. Consumer AI services require prompts to be processed through the provider's systems in accordance with standard terms, while enterprise agreements can provide more specific conditions.
This restriction highlights the increasing importance of secure AI adoption across government institutions.
As public agencies integrate AI into their daily operations, clear data protection policies, approved platforms, and stronger administrative oversight will remain necessary to prevent sensitive information from being exposed due to unregulated AI services.