Skip to Content

  • Home
  • Current issues
    • News
    • Guidelines of the European Data Protection Board
  • Data protection
    • What is personal data?
      • Pseudonymised and anonymised data
    • Legislation
      • Corrective powers
    • Frequently asked questions
      • Banking
      • Camera surveillance
      • Coronavirus
      • Data Protection Officers
      • Direct Marketing
      • Elections
      • Genealogy
      • Health care
      • Information systems
      • Internet
      • Mobile location
      • Personal identity code
      • Phone calls
      • Scientific research
      • Search engines
      • Working life
    • Scientific research and data protection
      • Defining the research scheme and purpose for processing personal data
      • Minimisation of personal data
      • Lifespan of personal data processing, data protection principles and the protection of data
      • Choosing the processing basis and ensuring its lawfulness
      • Rights of the data subject in scientific research
      • Roles and responsibilities for processing personal data
      • Transfer of data abroad
      • Accountability in scientific research
      • Destruction, anonymisation or archiving of data
      • The researcher’s data protection expertise
  • Private persons
    • Know your rights
    • Have you been notified of the processing of your personal data?
    • When you want to inspect your data
    • If you want to have your data rectified
    • If you would like to have your data erased
    • If you would like to have your personal data transferred to another controller
    • If you do not want your data processed
    • Have you been subjected to a decision based solely on automated processing?
    • Claiming damages
    • When a competent authority processes your personal data
      • What is a competent authority
      • Right to obtain information on the processing of personal data
      • Right to inspect data processed by a competent authority
      • Rectification of data processed by a competent authority
      • Erasure of data and restriction of processing
    • Notification to the Data Protection Ombudsman
      • Have your data protection rights been infringed?
      • Have you noticed a processing violation?
  • Organisations
    • Processing of personal data
      • When is the processing of personal data permitted?
        • Consent of the data subject
        • Controller's legitimate interests
        • Processing of special categories of personal data
      • Risk assessment and data protection planning
        • Impact assessments
          • Carrying out an impact assessment
          • List of processing operations which require DPIA
          • National laws
        • Prior consultation
          • Prior consultation request
      • Automated decision-making and profiling
      • Processing involving several EU countries
    • Data protection principles
      • Lawfulness, fairness and transparency
      • Purpose limitation
      • Minimisation of data
      • Accuracy of data
      • Storage limitation
      • Confidentiality and security
    • Demonstrate your compliance with data protection regulations
      • Record of processing activities
        • Controller's record of processing activities
        • Processor's record of processing activities
    • Inform data subjects about processing
    • Rights of the data subject
      • The right to obtain information on the processing of personal data
      • Right of access
      • Right to rectification
      • Right to erasure
      • Right to restriction of processing
      • Right to data portability
      • Right to object
      • Right not to be subject to a decision based solely on automated processing
      • What rights do data subjects have in different situations?
      • Derogating from the rights of data subjects
    • Data protection officers
      • Designating a data protection officer
      • Declaration of Data Protection Officer
      • Change to Data Protection Officer declaration
    • Processors
      • Processors’ responsibilities
    • Personal data breaches
      • Data breach notification
    • Transfers of personal data out of the European Economic Area
      • Transfers on the basis of an adequacy decision
      • Standard clauses adopted by the Commission
      • Safeguards to supplement transfer tools
      • Binding corporate rules
      • Derogations for specific situations
      • Brexit and the transfer of personal data to the UK
  • Office of the Data Protection Ombudsman
    • Duties
    • Mission statement
    • International activities
    • Annual report 2019
      • The importance of international cooperation is growing
      • Issues related to internal security
      • Focus areas of data protection activities
      • Personnel and finances
      • Archive
    • Forms
    • Our data protection policy
      • Visiting the office
      • Electronic services at our office
        • Cookies
      • Telephone services
      • Processing of matters within our competence
      • Processing of the personal data of Data Protection Officers
      • Submitting job applications
      • Disclosure of data
      • Your data protection rights and legal protection
    • Accessibility statement
    • Contact information
      • Telephone guidance
      • Registry
      • Data Protection Officer
      • Lecture requests
      • For the media
  • Suomi
  • Svenska
  • English
Data Protection Ombudsman’s Office
Search page
  • Home
  • Current issues
  • Data protection
  • Private persons
  • Organisations
  • Office of the Data Protection Ombudsman
  • Tietosuojavaltuutetun toimisto
  • en
  • Current issues

Current issues

  • News
  • Guidelines of the European Data Protection Board
  • 2021
  • 2020
  • 2019
  • 2018
  • Administrative fine imposed on higher education institution for data protection violations connected to processing of location data recorded as part of working hours monitoring
    29.7.2021
  • Office of the Data Protection Ombudsman makes first decision as lead supervisory authority in a cross-border case – right of access implementation did not comply with data protection rules
    12.7.2021
  • Fine for a company for carrying out direct marketing with robocalls without consent
    6.7.2021
  • Administrative Court: Office of the Data Protection Ombudsman's hearing procedure and administrative fine imposed for GDPR violation were appropriate
    10.6.2021
  • The Office of the Data Protection Ombudsman is valued for its expertise and reliability, room for improvement seen in customer orientation
    26.5.2021
  • Administrative fine imposed on company for data protection violations connected to parking control fees
    30.4.2021
  • Personal data stolen from Facebook have been leaked — see these resources for victims of the data leak
    4.4.2021
  • Our telephone guidance service is closed 22‒25 February
    11.2.2021
  • The Office of the Data Protection Ombudsman has published accreditation criteria for code of conduct monitoring bodies
    9.2.2021
  • Heljä-Tuulia Pihamaa appointed Deputy Data Protection Ombudsman
    21.1.2021
  • Telephone guidance service available from Monday to Thursday, 9 am to 11 am
    12.1.2021
  • Our telephone guidance service is closed from December 21 to January 6
    14.12.2020
  • Data protection opening doors into Europe for SMEs
    4.11.2020
  • The Office of the Data Protection Ombudsman is investigating the legality of the psychotherapy centre Vastaamo’s operations
    27.10.2020
  • Advice for the victims of the data leak
    25.10.2020
  • Anu Talus appointed Data Protection Ombudsman
    27.8.2020
  • Financial sanction on a company due to carrying out electronic direct marketing without prior consent as well as neglecting the rights of the data subject
    5.8.2020
  • Our telephone guidance service is closed from July 20 to August 2
    13.7.2020
  • Personal identity codes not to be used on invoices
    1.6.2020
  • Office of the Data Protection Ombudsman’s sanctions board imposes administrative fine for several deficiencies in personal data processing
    29.5.2020
  • Office of the Data Protection Ombudsman’s sanctions board imposed three administrative fines for data protection violations
    22.5.2020
  • Deputy Data Protection Ombudsman orders company to change the way it requests consent for the use of cookies
    15.5.2020
  • Deputy Data Protection Ombudsman ordered Google to delete search results
    7.5.2020
  • European Data Protection Board issues guidelines on personal data processing related to the coronavirus pandemic
    22.4.2020
  • The Office of the Data Protection Ombudsman is moving to Sörnäinen on 1 April 2020
    24.3.2020
  • The Office of the Data Protection Ombudsman has published an FAQ on data protection and the coronavirus
    23.3.2020
  • Data protection and limiting the spread of coronavirus
    12.3.2020
  • Deputy Data Protection Ombudsman: Customers need to be told before starting to record calls
    27.2.2020
  • European Data Protection Board - Eighteenth Plenary session: Evaluation of the GDPR and statement on privacy implications of mergers
    24.2.2020
  • European Data Protection Board: Seventeenth Plenary Session
    31.1.2020
  • European Data Protection Board - Sixteenth Plenary session
    5.12.2019
  • Deputy Data Protection Ombudsman reprimands Finnkino and orders the company to change its personal data processing practices
    4.12.2019
  • European Data Protection Board - Fifteenth Plenary session: Privacy Shield Review, Guidelines on Territorial Scope, Guidelines on Data Protection by Design & Default, Art. 64 Opinion on Exxon Mobil BCRs, Response letter to LIBE, Additional Protocol Budapest Convention
    18.11.2019
  • European Data Protection Board: Guidelines on the processing for online services based on contracts, Equinix BCRs and Passenger Name Records (PNR)
    11.10.2019
  • The Office of the Data Protection Ombudsman is opening a new helpline for controllers and Data Protection Officers
    30.9.2019
  • Our telephone guidance service is closed from July 22 to August 4
    18.7.2019
  • European Data Protection Board - Twelfth Plenary session: Guidelines on Video Surveillance, Implications of the US CLOUD Act, Opinion on SCCs for processors, Opinion on Accreditation Criteria for monitoring bodies of Codes of Conduct
    16.7.2019
  • Robots cannot make telephone sales calls without consumer’s consent
    14.6.2019
  • European Data Protection Board - Eleventh Plenary session: Guidelines on Codes of Conduct, annex to the Guidelines on Accreditation, annex to the Guidelines on Certification
    5.6.2019
  • The Office of the Data Protection Ombudsman's Annual Report 2018: case numbers multiplied by 2.5, awareness of data protection rights growing
    17.5.2019
  • European Data Protection Board - Tenth Plenary session: Election of a new Deputy Chair, response to MEP In‘t Veld, third annual Privacy Shield Review
    16.5.2019
  • Anu Talus and Jari Råman appointed Deputy Data Protection Ombudsmen
    25.4.2019
  • Kimmo Hakonen appointed as Intelligence Ombudsman
    17.4.2019
  • European Data Protection Board - Ninth Plenary session: Guidelines on the processing of personal data in the context of information society services
    12.4.2019
  • The Data Protection Ombudsman ordered Svea Ekonomi to correct its practices in the processing of personal data
    1.4.2019
  • European Data Protection Board - Eighth Plenary session: Interplay ePrivacy Directive and GDPR, statement on ePrivacy Regulation, DPIA Lists, Statement on Elections
    15.3.2019
  • 2700 personal data breaches have already been reported to the Office of the Data Protection Ombudsman
    22.2.2019
  • Open public consultation on guidelines on codes of conduct has started
    19.2.2019
  • European Data Protection Board - Seventh Plenary session: EDPB 2019/2020 Work program, opinion on the draft AA in the field of financial markets supervision, Brexit
    18.2.2019
  • European Data Protection Board has published Information Note on data transfers in the event of a no-deal Brexit
    13.2.2019
  • European Data Protection Board - Sixth Plenary session: Privacy Shield, Brexit, clinical trials Q&A
    28.1.2019
  • Our telephone guidance service is closed from December 24 to January 2
    17.12.2018
  • European Data Protection Board - Fifth Plenary session: EU-Japan draft adequacy decision, DPIA lists and guidelines on accreditation
    11.12.2018
  • Exceptions on opening times of the telephone service 28.–29.8.
    24.8.2018
  • Our telephone guidance service is closed from July 23 to August 1
    5.7.2018
  • New number for the telephone service on 4 June
    1.6.2018
  • Application of new data protection legislation beings tomorrow
    24.5.2018
  • Renewed website for the Office of the Data Protection Ombudsman
    24.5.2018

Office of the Data Protection Ombudsman

Visiting address: Lintulahdenkuja 4, 00530 Helsinki

Information about services during the coronavirus pandemic

Postal address: P.O. Box 800, 00531 Helsinki, Finland

E-mail: tietosuoja(at)om.fi

Switchboard: +358 (0)29 566 6700

Registry: +358 (0)29 566 6768

 

 

General guidance for private persons: +358 (0)29 566 6777

General guidance for controllers: +358 (0)29 566 6778

Available Mon–Thu 9 a.m. to 11 a.m.

Information about telephone guidance

Our data protection policy

Accessibility statement

For the media

 

Tietosuojavaltuutetun toimiston LinkedIn-tilille Tietosuojavaltuutetun toimiston Twitter-tilille ­ Tulosta

Back to top