Current Issues

Aktia Bank fined for data security shortcomings in its strong electronic authentication service

The Sanctions Board of the Office of the Data Protection Ombudsman has imposed a fine of EUR 865,000 on Aktia for failing to ensure data security in its electronic authentication service. Due to a short-term disruption, some people who had logged in to various services with Aktia's online banking credentials had access to other customers' highly personal data, as the service confused people's identities. The Office of the Data Protection Ombudsman considers that the bank demonstrated shortcomings in the design, implementation and testing of a technical change to the service.

Show more
Press release 28.10.2025 11.00

The revised online form for notifying data breaches will be published next week

The Office of the Data Protection Ombudsman has made changes to the online form for notifying personal data breaches. The revised form will be published on Monday, 27 October 2025 at 8.00 a.m. The aim is to streamline the processing of notifications.

Show more
Press release 20.10.2025 9.34