The 90 Million Krona Loophole: How Public Sector Procurement Failures Are Pricing In Regulatory Risk

Nine Swedish regions face 90 million SEK in sanctions for illegal procurement of the Cosmic journal system. Vendor Cambio agreed to cover the fines, a move the Competition Authority claims nullifies regulatory deterrence and exposes taxpayers to hidden liability risks.

The collapse of the Sussa collaboration’s procurement strategy offers a stark case study in public sector governance failure. What began as a strategic 4.3 billion SEK initiative to unify healthcare IT across nine regions has devolved into a regulatory quagmire. The Swedish Competition Authority (Konkurrensverket) has levied sanctions totaling 90 million SEK against the regions for executing an illegal direct procurement. Yet, the financial mechanics of the fallout reveal a deeper structural rot: a side agreement wherein the vendor, Cambio, indemnifies the regions against these very fines.

This indemnity clause transforms a regulatory penalty into a mere line-item expense, effectively neutralizing the deterrent power of the law. For the market and financial analysts tracking public sector efficiency, this signals a dangerous precedent where compliance risks are priced into contracts rather than mitigated through governance.

The Anatomy of a Procurement Collapse

The Sussa (Strategic Development of Healthcare Support Applications) partnership was designed to leverage collective bargaining power. In 2018, Cambio secured the contract with its Cosmic system. Yet, by 2020, the project was already stalled. Instead of enforcing penalty clauses for delay—a standard fiduciary duty in capital markets—the regions opted to renegotiate. They extended timelines and altered the scope, actions the Administrative Court of Appeal later deemed required a new procurement process entirely.

The financial exposure here is not limited to the 90 million SEK fine. The underlying contract value of 4.3 billion SEK suggests that the operational drag caused by the delayed and turbulent implementation likely far exceeds the regulatory penalty. When public entities prioritize vendor relationships over contractual rigidity, they invite the kind of moral hazard we are witnessing now.

Marie Östman, Director General of the Competition Authority, did not mince words regarding the indemnity agreement. “If one writes an agreement to avoid paying sanctions, one puts the whole system out of play,” Östman stated. “It costs nothing to break the rules.” This sentiment echoes broader concerns in financial markets regarding the enforceability of sovereign and quasi-sovereign obligations. When the penalty for non-compliance is underwritten by the counterparty, the risk premium disappears, distorting the market for public services.

Regulatory Arbitrage and the B2B Implications

The arrangement between the Sussa regions and Cambio functions as a form of regulatory arbitrage. By shifting the liability for legal breaches onto the vendor, the public entities insulate their balance sheets from immediate shock but compromise long-term accountability. This creates a hidden liability for taxpayers, who ultimately fund the vendor’s costs through inflated service pricing.

In the private sector, such an arrangement would trigger immediate scrutiny from corporate governance auditors. Institutional investors view the ability to absorb regulatory fines as a test of management integrity. When a company—or in this case, a public consortium—contracts away its liability, it signals a weakness in internal controls. As noted in industry profiles, the role of analysts is crucial when companies fail to fully understand their markets and finances, often requiring external intervention to restore transparency.

The precedent set here is dangerous for the broader B2B ecosystem. If vendors know they can underwrite fines to secure or maintain massive government contracts, they will simply price this risk into their initial bids. The cost of compliance becomes a hidden tax on public innovation.

“If this behavior becomes widespread, [vendors] will price in the risk of paying sanction fees in their bids. The fines lose their deterrent effect.”

This dynamic necessitates a robust framework for public sector compliance counsel. Organizations engaging in high-value government contracts must ensure that indemnity clauses do not violate public policy or procurement laws. The current situation in Sweden highlights a gap in legal oversight that specialized legal risk management firms are positioned to fill.

Market Consequences and Future Trajectory

The Civil Minister, Erik Slottner, has acknowledged the severity of the issue, noting that fines must have a deterrent effect. However, with no immediate legislative changes planned, the burden falls on the regions to rectify their governance frameworks. The regions now face a dilemma: appeal to the Supreme Administrative Court to potentially void the fine, or accept the precedent that vendors can pay for their regulatory sins.

From a capital markets perspective, this uncertainty introduces volatility into the Swedish public procurement sector. Investors and vendors alike require predictability. The current ambiguity regarding who bears the cost of regulatory failure—taxpayers or shareholders—creates a friction that stifles competition.

the involvement of the Financial Supervisory Authority (Finansinspektionen) looms large. Having previously banned insurance products that covered procurement fines, the Authority may view this indemnity clause as a similar violation of market integrity. This regulatory scrutiny underscores the need for rigorous financial audit services capable of navigating the intersection of public law and commercial contracts.

The Path Forward for Public-Private Partnerships

The Sussa-Cambio saga is not merely a Swedish problem; it is a warning for global public-private partnerships. As governments increasingly rely on private technology stacks to deliver essential services, the alignment of incentives becomes critical. When penalties are socialized or indemnified, the discipline of the market is lost.

For the nine regions involved, the immediate task is damage control. But for the broader market, the lesson is clear: procurement contracts must be stress-tested against regulatory challenges before signature. The cost of a contract management specialist is negligible compared to the reputational and financial cost of a 90 million SEK sanction that no one actually pays.

As we move into the next fiscal quarter, expect to witness increased scrutiny on public sector IT contracts. The era of “too big to fail” procurement is ending, replaced by a demand for transparency and enforceable accountability. Those who fail to adapt will find themselves not just fined, but fundamentally excluded from the market.