Have you misplaced personal data?
This page provides instructions on what to do if your personal data has been lost, stolen or acquired with a phishing message.
Act fast especially if:
- you have lost payment card details or your online bank ID and password;
- you have lost your passport or identity card; or
- an important username and the associated password have been disclosed to third parties.
If a crime has been committed against you, file a police report in the police e-services as soon as possible. For example, file a report if a device containing your personal data has been stolen or you have fallen victim to identity theft (Victim Support Finland website).
Instructions for personal data breaches and misplaced personal data
1. File a police report if your passport or identity card has been lost or stolen. You can file the report online (file an electronic report in the police e-services) or by visiting a police department. If you are abroad, file the report with the Finnish mission (website of the foreign service).
Filing a report prevents misuse. Once you have filed the report, you can apply for a new passport or identity card from the police, or for a new driving licence from the Finnish Transport and Communications Agency Traficom.
Read more:
Applying for a passport on the police website
Applying for an identity card on the police website
Order a new driving licence on Traficom's website
2. Consider getting a voluntary ban on credits. The voluntary credit ban reduces the risk of identity theft as well as credit card purchases and payday loan withdrawals by a third party. However, it can also cause problems, for example if you want to apply for credit yourself. A voluntary credit ban may make it impossible or at least more difficult to apply for credit.
You can set a voluntary credit ban on yourself in the Tax Administration's positive credit register. The positive credit register's e-service is free of charge, and you can set, update or remove the credit ban through the service. This information about a credit ban broadly reaches credit issuers, as they are affected by the obligation to check information for the purposes of granting credit. However, the voluntary credit ban does not completely prevent misuse.
You can also get an ‘Oma luottokielto’ personal credit ban via the websites of Suomen Asiakastieto Oy and/or Dun & Bradstreet Finland Oy (formerly Bisnode Finland Oy). Both companies maintain their own credit information register. In case of applying for credit or drawing up an agreement, some of the parties granting credit will receive information about the credit ban you have set up yourself. In that case, a bank or an online shop can verify the identity of the credit applicant more carefully than usual. If the credit issuer uses a different credit information register, it will not be notified of the entry. In other words, obtaining a personal credit ban is not a completely fail-safe way of preventing misuse.
3. Keep an eye on your bank account. If you notice transactions in your bank account that you have not made yourself, file a complaint with your bank. The customer service of your bank will give you more instructions. You should also file a report of an offence concerning the transactions with the police.
1. Report the loss of your card immediately to your bank's card-blocking service (Finnish Financial Ombudsman Bureau website) if your payment card has been lost permanently or stolen. Act fast. Card-blocking services are available around the clock.
2. Some online banks permit the temporary blocking of your payment card. Use this option if, for example, you know that you have temporarily misplaced your card at home.
3. Keep an eye on your bank account. If you notice transactions that you have not made yourself, file a complaint with your bank. The customer service of your bank will give you more instructions. Also file a police report in the police e-services.
1. Notify your bank if you lose your online bank codes. File the report as soon as possible, for example by telephone or through your online bank. The bank will freeze your bank codes after receiving the report.
Never keep your user ID, PIN and single-use codes in the same place. When you are issued with new online bank codes, remember to keep them separate from your user ID. This will release you from liability or at least limit your liability in the event of misuse, as well as preventing misuse should you lose the codes again.
If you have misplaced just your bank account number, you do not have to do anything. The possibility of misuse is negligible if the perpetrator has no other information than your bank account number.
2. Keep an eye on your bank account. If you notice transactions that you have not made yourself, file a complaint with your bank. The customer service of your bank will give you more instructions. Also file a police report in the police e-services.
1. Change your password immediately.
2. If the username and password are related to your work, notify your employer as soon as possible.
1. Notify your operator of the loss. The operator will provide you with a new SIM card for your old number.
2. File a police report in the police e-services if the phone was stolen.
3. Set the status of your phone as 'lost'. This is not possible with all devices.
Device-specific instructions:
If your iPhone, iPad or iPod touch is lost or stolen (Apple website)
Find your Samsung mobile (Samsung website)
Find and lock a lost Windows device (Windows website)
4. Change the passwords of all usernames that can be accessed with the lost device.
1. Please remember that the attacker can easily access the data on your hard drive if the hard drive has not been encrypted and protected with a strong password. A password alone will not protect the data in your computer.
2. File a police report in the police e-services if your computer has been stolen.
3. Set the status of your computer as 'lost'. This is not possible with all devices.
Device-specific instructions:
If your iPhone, iPad or iPod touch is lost or stolen (Apple website)
Find your Samsung mobile (Samsung website)
Find and lock a lost Windows device (Windows website)
4. Change the passwords of all usernames that can be accessed with the lost device.
Report the card as missing to its issuer (such as the public transport service or library). Ask them for a new card. They may charge a fee to cover the costs of replacing your card.
You can inquire about lost items from the police or a lost property office. Always change your passwords, online bank codes and payment cards even if you recover your lost property. Someone may have copied the data before your property was delivered to the police or lost property office.
Make sure that the latest data security updates have been installed on your device.
1. File a police report in the police e-services. Even an attempted fraud can be a crime.
2. Consult the Victim Support Finland website for instructions and additional information on fraud and identity theft.
Decrease the risk of misuse of your personal data
You can protect yourself from personal data breaches and the loss and misuse of your personal data by being careful.
- Do not reply to suspicious email messages asking for your usernames, passwords, debit or credit card details, or personal data. Organisations such as the police, your bank, the Tax Administration, Microsoft or Google never ask for such information over the telephone or by email.
- Use different passwords for different services.
- Do not carry passwords or other codes with you unnecessarily. Follow the instructions of your bank concerning the storage of your user ID and codes.
- Use reliable and secure online shops. The Finnish Competition and Consumer Authority website contains information on avoiding online shop scams.
- Dispose carefully of any papers containing your personal data.
- Keep your identification documents and cards safe.
- Wipe devices containing your personal data before disposing of them, selling them or giving them away.
- Clear your browser cache and cookies regularly.