THE SHORT ANSWER
The meeting has ended, but that does not establish whether sharing is still active. The person needs to understand what ends and who is responsible for what remains. Start by separating the assignment, access and documentation.
This guide concerns an individual review within Forsio's agreed and activated workspace for home and income cover. It does not concern sharing with someone close, employer statistics or a general right to read the person's policies. [1][2]
Keep these points in mind
- The end of a meeting does not itself withdraw sharing.
- Withdrawn access and complete erasure are separate questions.
- Separate records need a clear purpose and lawful basis.
STEP BY STEP
How to review the documents
Establish what is actually ending
Identify the review and recipient concerned. Separate your assignment from the person's consent to sharing in Forsio. If the assignment involves a separate power of attorney, its scope and ending also need checking. A system permission does not answer all these questions.
Forsio's mandate to retrieve information concerns the retrieval the person starts. It is not a standing mandate or a right to change policies. A completed retrieval or BankID sign-in therefore does not determine how long a named recipient may read the documents.
[2][3]Check the recipient, validity and withdrawal
Check the current sharing with the specified recipient, the information and operations it covers, and its validity. In My Forsio, the person can withdraw the named sharing. Use the product's current consent text and status rather than writing a replacement in a closing letter.
On new attempts to read the documents, Forsio checks both current professional authority and valid sharing. Withdrawn or expired approval does not allow continued access merely because the staff member is signed in. An old bookmark, previous assignment or administrator role does not replace these checks.
[1][3][4]Define any continuing record keeping
Review what the organisation itself needs to document, why the information is needed and who is responsible. The Swedish Authority for Privacy Protection describes exceptions to erasure, including necessary processing for legal obligations or legal claims. This is not general permission to retain the complete insurance file.
Where insurance distribution rules apply, documentation requirements exist. The organisation needs to determine what applies to its assignment and limit information and storage accordingly. That responsibility does not grant continued access in Forsio. The summary does not replace the organisation's own assessment of lawful basis or duties.
[5][6][7]Make the ending clear to the person
Confirm what has ended and refer to the current sharing status. Separately explain how questions about remaining records and erasure are handled. Identify the responsible contact. A closed right of access is not confirmation that every previously displayed or saved copy has been erased.
If a new assignment arises later, the recipient, scope and valid basis need checking again. Earlier sharing is not a general power of attorney. Ending the review does not change the person's insurance contracts and is not itself a request to delete their own My Forsio account.
[3][2][5]
Access status is not proof of erasure
Withdrawing sharing with a particular recipient and requesting erasure of the entire account are separate actions. Forsio's privacy policy explains what happens to insurance information, account details and evidence of consent. Follow the current policy and the choice the person actually makes.
The workspace can show administrative status for earlier consent without granting access to insurance documents. Material already displayed or saved also needs handling by the responsible organisation. Do not promise that open views or external copies disappear through withdrawal.
[3][1][5]Retain information for a defined purpose
The Swedish Authority for Privacy Protection starts from information not being kept longer than its purpose requires. Distinguish assignment records, evidence of consent and material no longer needed. Withdrawal does not create a new purpose or unlimited retention rights.
Identify which categories need to remain, the basis for doing so and when the continuing need will be reviewed. One retention period does not fit every organisation and category of information. Forsio's source references and access controls support that process; they do not guarantee that documentation or data protection requirements are met.
[6][5][7]Fictional example
Review complete. Sharing withdrawn.
A person has received a home and income cover review and then withdraws sharing with the named recipient.
- Sharing with the recipient
- Consent withdrawn
- New attempt to read the documents
- Access is not permitted
- The organisation's separate records
- Assessed against purpose and applicable rules
Blocked new access does not establish that every earlier copy has been erased.
Common questions
FOR ORGANISATIONS
Review the ending of your individual workflow.
We show the agreed scope for home and income cover and how current authority and named sharing limit access.
Sources and references
Sources checked
This guide explains general principles. Check the current agreements, roles and permissions for your organisation.
- Forsio: individual member review workspace
- My Forsio: user terms, retrieval mandate and sharing
- My Forsio: privacy policy, recipients and retention
- Swedish Authority for Privacy Protection: consent and withdrawal
- Swedish Authority for Privacy Protection: erasure rights and exceptions
- Swedish Authority for Privacy Protection: how long information may be retained
- Swedish Parliament: Insurance Distribution Act, Chapter 5 Section 21