"An undefined purpose gives no framework to the personal data, which in practice undermines the protection of individuals' integrity," the ruling read.
The SIN report also concluded that there had been no need to add all the names in the database, which Skåne County police said was originally put together to keep tabs on Roma in the south suspected of crime. The list ballooned, however, including children, reporters at public service radio's Romani Chib broadcast, and even in-laws of Roma Swedes, and people who had passed away.
The official SIN review looked into a random selection of 1,235 on the list who were not children. The list also included deceased persons that were not included in the review.
Skåne County police has claimed the list was assembled to "fight a criminal network" rather than to keep tabs on people of a specific ethnicity.