Skip to Content

X

  • Home
  • Current issues
    • News
    • Guidelines of the European Data Protection Board
  • Data protection
    • What is personal data?
      • Pseudonymised and anonymised data
    • Legislation
      • Corrective powers
    • Frequently asked questions
      • Banking
      • Camera surveillance
      • Coronavirus
      • Data Protection Officers
      • Direct Marketing
      • Elections
      • Health care
      • Information systems
      • Internet
      • Mobile location
      • Personal identity code
      • Phone calls
      • Genealogy
      • Search engines
      • Working life
    • Scientific research and data protection
      • Defining the research scheme and purpose for processing personal data
      • Minimisation of personal data
      • Lifespan of personal data processing, data protection principles and the protection of data
      • Choosing the processing basis and ensuring its lawfulness
      • Rights of the data subject in scientific research
      • Roles and responsibilities for processing personal data
      • Transfer of data abroad
      • Accountability in scientific research
      • Destruction, anonymisation or archiving of data
      • The researcher’s data protection expertise
  • Private persons
    • Know your rights
    • Have you been notified of the processing of your personal data?
    • When you want to inspect your data
    • If you want to have your data rectified
    • If you would like to have your data erased
    • If you would like to have your personal data transferred to another controller
    • If you do not want your data processed
    • Have you been subjected to a decision based solely on automated processing?
    • Claiming damages
    • When a competent authority processes your personal data
      • What is a competent authority
      • Right to obtain information on the processing of personal data
      • Right to inspect data processed by a competent authority
      • Rectification of data processed by a competent authority
      • Erasure of data and restriction of processing
    • Notification to the Data Protection Ombudsman
      • Have your data protection rights been infringed?
      • Have you noticed a processing violation?
  • Organisations
    • Processing of personal data
      • When is the processing of personal data permitted?
        • Consent of the data subject
        • Controller's legitimate interests
        • Processing of special categories of personal data
      • Risk assessment and data protection planning
        • Impact assessments
          • Carrying out an impact assessment
          • List of processing operations which require DPIA
          • National laws
        • Prior consultation
          • Prior consultation request
      • Automated decision-making and profiling
      • Processing involving several EU countries
    • Data protection principles
      • Lawfulness, fairness and transparency
      • Purpose limitation
      • Minimisation of data
      • Accuracy of data
      • Storage limitation
      • Confidentiality and security
    • Demonstrate your compliance with data protection regulations
      • Record of processing activities
        • Controller's record of processing activities
        • Processor's record of processing activities
    • Inform data subjects about processing
    • Rights of the data subject
      • The right to obtain information on the processing of personal data
      • Right of access
      • Right to rectification
      • Right to erasure
      • Right to restriction of processing
      • Right to data portability
      • Right to object
      • Right not to be subject to a decision based solely on automated processing
      • What rights do data subjects have in different situations?
      • Derogating from the rights of data subjects
    • Data protection officers
      • Designating a data protection officer
      • Declaration of Data Protection Officer
      • Change to Data Protection Officer declaration
    • Processors
      • Processors’ responsibilities
    • Personal data breaches
      • Data breach notification
    • Transfers of personal data out of the European Economic Area
      • Transfers on the basis of an adequacy decision
      • Standard clauses adopted by the Commission
      • Safeguards to supplement transfer tools
      • Binding corporate rules
      • Derogations for specific situations
      • Brexit and the transfer of personal data to the UK
  • Office of the Data Protection Ombudsman
    • Duties
    • Mission statement
    • International activities
    • Annual report 2019
      • The importance of international cooperation is growing
      • Issues related to internal security
      • Focus areas of data protection activities
      • Personnel and finances
      • Archive
    • Forms
    • Our data protection policy
      • Visiting the office
      • Electronic services at our office
        • Cookies
      • Telephone services
      • Processing of matters within our competence
      • Processing of the personal data of Data Protection Officers
      • Submitting job applications
      • Disclosure of data
      • Your data protection rights and legal protection
    • Accessibility statement
    • Contact information
      • Telephone guidance
      • Registry
      • Data Protection Officer
      • Lecture requests
      • For the media
Menu
  • Suomi
  • Svenska
  • English
Data Protection Ombudsman’s Office
Search page
  • Home
  • Current issues
  • Data protection
  • Private persons
  • Organisations
  • Office of the Data Protection Ombudsman
  • Tietosuojavaltuutetun toimisto
  • en
  • Office of the Data Protection Ombudsman
  • Annual report 2019
  • Archive
  • Duties
  • Mission statement
  • International activities
  • Annual report 2019
    • The importance of international cooperation is growing
    • Issues related to internal security
    • Focus areas of data protection activities
    • Personnel and finances
    • Archive
  • Forms
  • Our data protection policy
  • Accessibility statement
  • Contact information

Archive

Annual Report of the Office of the Data Protection Ombudsman 2019 (pdf)

Annual Report of the Office of the Data Protection Ombudsman 2018 (pdf)

Office of the Data Protection Ombudsman

Visiting address: Lintulahdenkuja 4, 00530 Helsinki

Information about services during the coronavirus pandemic

Postal address: P.O. Box 800, 00531 Helsinki, Finland

E-mail: tietosuoja(at)om.fi

Switchboard: +358 (0)29 566 6700

Registry: +358 (0)29 566 6768

 

 

General guidance for private persons: +358 (0)29 566 6777

General guidance for controllers: +358 (0)29 566 6778

30 June to 23 July available on Wednesdays and Thursdays 9 a.m. to 11 a.m.

Telephone guidance service closed from 26 July to 20 August

Information about telephone guidance

Our data protection policy

Accessibility statement

For the media

 

Tietosuojavaltuutetun toimiston LinkedIn-tilille Tietosuojavaltuutetun toimiston Twitter-tilille ­ Tulosta