Search

Your search for 'Information' returned 407 results
Fess search
  1. 19.3.2026 | This year, European data protection authorities will investigate how well organisations comply with the transparency and information obligations related to personal data processing. Data protection authorities from 25 countries across Europe will take part in the action.
    https://tietosuoja.fi/en/-/the-office-of-the-data-protection-ombudsman-to-investigate-the-transparency-of-personal-data-processing-as-part-of-eu-wide-action
  2. 10.7.2026 | ANNUAL REPORT OF THE OFFICE OF THE DATA PROTECTION OMBUDSMAN OF FINLAND 2025 ANNUAL REPORT OF THE OFFICE OF THE DATA PROTECTION OMBUDSMAN OF FINLAND 2025 3 Contents The Office of the Data Protection Ombudsman safeguards the rights and freedoms of ...
    https://tietosuoja.fi/documents/6927448/267659444/TSV%20Annual%20Report%202025%20saavutettava.pdf/2f0bc5fe-b5bd-f5cd-6110-cca70019fede?t=1783669724217
  3. 14.7.2026 | The annual report of the Office of the Data Protection Ombudsman describes the most important data protection events of the year, supervisory work in different sectors and performance indicators. Last year was marked by an increase in the use of artificial intelligence, the transforming legislative field and the debate on the competitiveness of the EU.
    https://tietosuoja.fi/en/-/annual-report-of-the-office-of-the-data-protection-ombudsman-2025-artificial-intelligence-and-world-politics-were-highlighted-in-data-protection-work
  4. The review and approval of codes of conduct at the Office of the Data Protection Ombudsman The Office of the Data Protection Ombudsman reviews and approves national codes of conduct applied in Finland. The criteria for the content of codes of cond...
    https://tietosuoja.fi/en/the-review-and-approval-of-codes-of-conduct
  5. Right to data portability The data subject has the right to receive the personal data that he or she has provided to a controller in a structured, commonly used and machine-readable format and, if desired, transmit that data to another controller....
    https://tietosuoja.fi/en/right-to-data-portability
  6. Processing involving several EU countries If your organisation operates in more than one EU country, you need to find out which country’s supervisory authority you are meant to deal with. This data protection authority is called the lead superviso...
    https://tietosuoja.fi/en/processing-involving-several-eu-countries
  7. Roles and responsibilities for processing personal data in scientific research A research project can involve a variety of parties in different roles. Personal data may be processed for research purposes by one or more research organizations, pers...
    https://tietosuoja.fi/en/roles-and-responsibilities-for-processing-personal-data
  8. List compiled by the Office of the Data Protection Ombudsman of processing operations which require data protection impact assessment (DPIA) Updated 21.12.2018 Article 35 (1) GDPR requires a DPIA when the processing activity is likely to result in...
    https://tietosuoja.fi/en/list-of-processing-operations-which-require-dpia
  9. Transfers of personal data out of the European Economic Area Transferring personal data out of the EEA requires an appropriate basis for the transfer and compliance with the other requirements imposed by data protection legislation. This page desc...
    https://tietosuoja.fi/en/transfers-of-personal-data-out-of-the-eea
  10. Notification to the Data Protection Ombudsman Concerning your rights Data protection rights help you manage your data. If you would like to exercise your rights, first contact the company or organisation that is processing your data, i.e. the cont...
    https://tietosuoja.fi/en/notification-to-the-data-protection-ombudsman
  11. Binding corporate rules Binding Corporate Rules (BCR) refer to common binding rules on the transfer of personal data to third countries within companies in the same group of undertakings or group of enterprises engaged in a joint economic activity...
    https://tietosuoja.fi/en/binding-corporate-rules
  12. Lifespan of personal data processing, data protection principles and the protection of data in scientific research If processing of personal data is necessary for the implementation of the study, the lifespan of the processing must be planned from...
    https://tietosuoja.fi/en/lifespan-of-personal-data-processing-data-protection-principles-and-the-protection-of-data
  13. Storage limitation Personal data may only be stored for as long as necessary for the purposes of processing. The controller must plan and be able to justify the storage time of the personal data. The storage times of personal data must also be doc...
    https://tietosuoja.fi/en/storage-limitation
  14. Codes of Conduct Codes of conduct are sector-specific guidelines on the application of data protection legislation. They are intended to help organisations comply with data protection requirements with concrete and practical instructions. By commi...
    https://tietosuoja.fi/en/codes-of-conduct
  15. Risk assessment and data protection planning Controllers have a responsibility to assess the risks relating to the processing of personal data every time they are about to process personal data. A risk assessment allows controllers to plan the ste...
    https://tietosuoja.fi/en/risk-assessment-and-data-protection-planning
  16. Minimisation of data Personal data may only be processed when necessary for the purposes of the processing. The personal data being processed must be appropriate , i.e. data that can be used to fulfil a specified purpose of processing relevant , i...
    https://tietosuoja.fi/en/minimisation-of-data
  17. Office of the Data Protection Ombudsman The Office of the Data Protection Ombudsman safeguards your data protection rights The Data Protection Ombudsman is a national supervisory authority which supervises the compliance with data protection legis...
    https://tietosuoja.fi/en/office-of-the-data-protection-ombudsman
  18. Data breach notification Purpose of processing If a personal data breach can cause a risk to the rights and freedoms of natural persons, the supervisory authority must be notified. In Finland, the Office of the Data Protection Ombudsman functions ...
    https://tietosuoja.fi/en/data-breach-notification
  19. Duties of the Data Protection Ombudsman supervising compliance with data protection legislation and other laws concerning the processing of personal data promoting awareness of the risks, rules, safeguards, obligations and rights related to the pr...
    https://tietosuoja.fi/en/duties
  20. Data protection principles The data protection principles must always be observed when processing personal data . The controller must also be able to demonstrate the effective implementation of the data protection principles in the processing of p...
    https://tietosuoja.fi/en/data-protection-principles