Search

Your search for 'data protection officers' returned 224 results
Fess search
  1. 25.4.2025 | The Data Protection Ombudsman has approved two applications by Nokia for binding corporate rules (so-called BCRs). BCRs are legally binding rules for the transfer of personal data within a group of enterprises. They allow companies in the same group to transfer personal data between each other outside the EU and EEA countries.
    https://tietosuoja.fi/en/-/data-protection-ombudsman-confirms-nokia-s-bcr-rules-for-international-data-transfers
  2. 4.6.2025 | The Sanctions Board of the Office of the Data Protection Ombudsman issued a EUR 1,100,000 administrative fine against the pharmacy company Yliopiston Apteekki because of data protection shortcomings found in the pharmacy’s online shop related to the use of tracking services. Data on the customers’ use of the online shop was leaked to tracking service companies through the website’s analytics tools and tracking technology.
    https://tietosuoja.fi/en/-/yliopiston-apteekki-fined-for-online-shop-data-protection-shortcomings
  3. 5.3.2025 | This year, the European data protection authorities will examine how organisations are exercising the right of individuals to have their personal data erased. Thirty-two data protection supervisory authorities from across Europe are participating in the joint inquiry. The Office of the Data Protection Ombudsman will investigate the situation in Finland through an anonymous survey of data controllers.
    https://tietosuoja.fi/en/-/office-of-the-data-protection-ombudsman-to-examine-the-exercise-of-the-right-to-erasure-as-part-of-an-eu-wide-measure
  4. 20.10.2025 | The Office of the Data Protection Ombudsman has made changes to the online form for notifying personal data breaches. The revised form will be published on Monday, 27 October 2025 at 8.00 a.m. The aim is to streamline the processing of notifications.
    https://tietosuoja.fi/en/-/the-revised-online-form-for-notifying-data-breaches-will-be-published-next-week
  5. Frequently asked questions about Data Protection Officers More information about data protection officers and instructions for organisations and managers that have designated a data protection officer Do the Data Protection Officer's name and cont...
    https://tietosuoja.fi/en/faq-dpos
  6. 9.11.2023 | On 9 November, the Supreme Administrative Court rejected ParkkiPate Oy's application for leave to appeal against the decision of the Helsinki Administrative Court. In July 2022, the Helsinki Administrative Court had rejected the company's claims for repealing the orders and reprimands issued by the Data Protection Ombudsman and the administrative fine imposed by the Sanctions Board.
    https://tietosuoja.fi/en/-/the-supreme-administrative-court-did-not-grant-parkkipate-oy-leave-to-appeal-the-administrative-court-decision-concerning-the-office-of-the-data-protection-ombudsman-s-decisions-will-remain-in-force
  7. 6.8.2025 | We have put together answers to frequently asked questions about alcohol and drug testing in the workplace on our website. We also added information on what employers should consider when collecting personal data from employees and job applicants.
    https://tietosuoja.fi/en/-/we-completed-the-guidance-on-the-alcohol-testing-of-employees-and-processing-of-personal-data-in-the-workplace
  8. Know your responsibility and build trust
    https://tietosuoja.fi/en/organisations
  9. 17.1.2023 | The Deputy Data Protection Ombudsman has issued a reprimand to the libraries of the cities of Helsinki, Espoo, Vantaa and Kauniainen for infringements of data protection legislation in the processing of personal data. The websites of the Capital Region's Helmet libraries have used tracking technologies that may have conveyed data on, for example, the books and other materials searched for by users to third parties. Personal data has also been unlawfully transferred to the United States.
    https://tietosuoja.fi/en/-/deputy-data-protection-ombudsman-issues-reprimand-for-conveying-library-search-information-to-us-based-google
  10. Processing of matters within our competence Processing of personal data in connection with the processing of cases falling within our competence Cases instituted with the Office of the Data Protection Ombudsman are logged in the Office's case mana...
    https://tietosuoja.fi/en/processing-of-matters-within-our-competence
  11. This section provides answers to common questions.
    https://tietosuoja.fi/en/frequently-asked-questions
  12. 23.3.2020 | The Office of the Data Protection Ombudsman has compiled answers to the most common questions concerning data protection and the coronavirus epidemic. The FAQ is published on the Office’s website, and its topics include the publication of coronavirus statistics, the definition of health data and the employer’s confidentiality obligation. The FAQ will be updated as required.
    https://tietosuoja.fi/en/-/tietosuojavaltuutetun-toimisto-julkaisi-vastauksia-kysymyksiin-koronaviruksesta-ja-tietosuojasta
  13. Processors’ responsibilities Processors are governed by the General Data Protection Regulation if they are established in an EU Member State they are not established in an EU Member State but their personal data processing activities relate to the...
    https://tietosuoja.fi/en/processors-responsibilities
  14. Binding corporate rules Binding Corporate Rules (BCR) refer to common binding rules on the transfer of personal data to third countries within companies in the same group of undertakings or group of enterprises engaged in a joint economic activity...
    https://tietosuoja.fi/en/binding-corporate-rules
  15. Frequently asked questions on data protection and the coronavirus What does health data mean? Health data refers to information about an individual’s health, diseases, disability or treatment. Health data belongs to the special categories of perso...
    https://tietosuoja.fi/en/coronavirus-covid-19
  16. Annual report 2025 The annual report describes the year's most important data protection events, supervision measures in different sectors and presents the key figures for the Office's operations. Annual report of the Office of the Data Protection...
    https://tietosuoja.fi/en/annual-report-2025
  17. Archive On this page, you will find the annual reports of the Office of the Data Protection Ombudsman from previous years. Annual Report of the Office of the Data Protection Ombudsman 2024 (pdf) Annual Report of the Office of the Data Protection O...
    https://tietosuoja.fi/en/archive
  18. 15.2.2022 | The Office of the Data Protection Ombudsman will participate in a coordinated enforcement action of the European Data Protection Board along with 22 other supervisory authorities. The purpose of the action is to investigate use of cloud-based services in the public sector. The action of the EDPB was launched on 15 February.
    https://tietosuoja.fi/-/tietosuojavaltuutetun-toimisto-kaynnistaa-selvityksen-julkisen-sektorin-pilvipalvelujen-kaytosta-osana-euroopan-valvontaviranomaisten-yhteista-toimenpidetta
  19. 12.3.2020 | Data protection legislation does not restrict public health measures or the prevention of infectious diseases, but must still be taken into account in the processing of personal data. Public and private organisations have begun taking measures to limit the spread of coronavirus COVID-19 and mitigate its effects. Some of these measures may involve the processing of personal data.
    https://tietosuoja.fi/en/-/tietosuoja-ja-koronaviruksen-leviamisen-hillitseminen
  20. European cooperation The Office of the Data Protection Ombudsman is an active member of the European Data Protection Board (EDPB). The EDPB promotes cooperation between European data protection authorities and the consistent application of data pr...
    https://tietosuoja.fi/en/european-cooperation