The article highlights the tensions that exist in the protection of privacy online in Sweden following the enactment of the Personal Data Act in 1998. It raises the question whether the Data Protection Directive 95/46/EC is outdated (complementing the Directive on Privacy and Electronic Communications 2002/58/EC) and whether it necessitates a review in the light of current online developments. The problem with dealing with the protection of privacy online as a national solution, such as Sweden does, is that the pervasive application of personal data in the cyberspace environment is a global problem requiring solutions that are not confined within the national borders. This article will consider the Swedish developments and raise the debate about the need for a global dialogue not confined within the European Union, but one that engages other countries such as the United States.