Search
- Fess search
Showing 121 to 140 of 405 entries.
-
Processing involving several EU countries If your organisation operates in more than one EU country, you need to find out which country’s supervisory authority you are meant to deal with. This data protection authority is called the lead superviso...https://tietosuoja.fi/en/processing-involving-several-eu-countries
-
Right to data portability The data subject has the right to receive the personal data that he or she has provided to a controller in a structured, commonly used and machine-readable format and, if desired, transmit that data to another controller....https://tietosuoja.fi/en/right-to-data-portability
-
List compiled by the Office of the Data Protection Ombudsman of processing operations which require data protection impact assessment (DPIA) Updated 21.12.2018 Article 35 (1) GDPR requires a DPIA when the processing activity is likely to result in...https://tietosuoja.fi/en/list-of-processing-operations-which-require-dpia
-
12.6.2026 | The Supreme Administrative Court has enforced the decision of the Office of the Data Protection Ombudsman and the Sanctions Board of the Data Protection Ombudsman concerning the operations of Verkkokauppa.com Plc. The company violated data protection provisions by failing to specify the storage periods for customer account data.https://tietosuoja.fi/en/-/supreme-administrative-court-upholds-the-administrative-fine-imposed-on-verkkokauppa.com-for-data-protection-violations
-
Rätten att få information om behandlingen av personuppgifter En registrerad har rätt att få information om insamling och behandling av hans eller hennes personuppgifter. Behandlingen av personuppgifter ska vara transparent. En registrerad ska info...https://tietosuoja.fi/sv/ratten-att-fa-information-om-behandlingen-av-personuppgifter
-
The review and approval of codes of conduct at the Office of the Data Protection Ombudsman The Office of the Data Protection Ombudsman reviews and approves national codes of conduct applied in Finland. The criteria for the content of codes of cond...https://tietosuoja.fi/en/the-review-and-approval-of-codes-of-conduct
-
19.3.2026 | This year, European data protection authorities will investigate how well organisations comply with the transparency and information obligations related to personal data processing. Data protection authorities from 25 countries across Europe will take part in the action.https://tietosuoja.fi/en/-/the-office-of-the-data-protection-ombudsman-to-investigate-the-transparency-of-personal-data-processing-as-part-of-eu-wide-action
-
Impact assessment Impact assessments are designed to identify, evaluate and control risks involved in the processing of personal data. They are designed to be a continuous process for identifying and controlling risks. Impact assessments must be c...https://tietosuoja.fi/en/impact-assessments
-
25.3.2026 | The Sanctions Board of the Office of the Data Protection Ombudsman has imposed a fine of EUR 5,000 on Suomen Numerokeskus Oy, as the company systematically failed to comply with customers’ right to access recordings of customer calls. The company also deleted the call recordings despite requests from customers to review them.https://tietosuoja.fi/en/-/suomen-numerokeskus-fined-for-failing-to-provide-call-recordings
-
30.1.2026 | On Thursday 29 January 2026, the Government appointed Heljä-Tuulia Pihamaa, Master of Laws, to the post of Deputy Data Protection Ombudsman for the next five-year term of office, starting on 22 March. Pihamaa has been serving as Deputy Data Protection Ombudsman since March 2021.https://tietosuoja.fi/en/-/helja-tuulia-pihamaa-continues-as-deputy-data-protection-ombudsman
-
20.10.2025 | The Office of the Data Protection Ombudsman has made changes to the online form for notifying personal data breaches. The revised form will be published on Monday, 27 October 2025 at 8.00 a.m. The aim is to streamline the processing of notifications.https://tietosuoja.fi/en/-/the-revised-online-form-for-notifying-data-breaches-will-be-published-next-week
-
6.8.2025 | We have put together answers to frequently asked questions about alcohol and drug testing in the workplace on our website. We also added information on what employers should consider when collecting personal data from employees and job applicants.https://tietosuoja.fi/en/-/we-completed-the-guidance-on-the-alcohol-testing-of-employees-and-processing-of-personal-data-in-the-workplace
-
4.7.2025 | On 1–2 July, the European Data Protection Board met in Helsinki for a two-day high level meeting to discuss common outlines for future work. In the statement issued at the meeting, the data protection authorities agreed on new measures to facilitate compliance with data protection regulations, to increase dialogue with stakeholders and to develop cooperation between authorities in different sectors.https://tietosuoja.fi/en/-/edpb-issues-helsinki-statement-support-and-clarity-for-small-and-medium-sized-actors
-
25.4.2025 | The Data Protection Ombudsman has approved two applications by Nokia for binding corporate rules (so-called BCRs). BCRs are legally binding rules for the transfer of personal data within a group of enterprises. They allow companies in the same group to transfer personal data between each other outside the EU and EEA countries.https://tietosuoja.fi/en/-/data-protection-ombudsman-confirms-nokia-s-bcr-rules-for-international-data-transfers
-
5.3.2025 | This year, the European data protection authorities will examine how organisations are exercising the right of individuals to have their personal data erased. Thirty-two data protection supervisory authorities from across Europe are participating in the joint inquiry. The Office of the Data Protection Ombudsman will investigate the situation in Finland through an anonymous survey of data controllers.https://tietosuoja.fi/en/-/office-of-the-data-protection-ombudsman-to-examine-the-exercise-of-the-right-to-erasure-as-part-of-an-eu-wide-measure
-
25.2.2025 | The EU's Digital Services Act imposes obligations on digital service providers to improve the transparency and security of their services. Last year, authorities in Finland received nearly 80 complaints about suspected breaches of the Digital Services Act, and the EU Commission has launched several investigations into digital waste. The act, which improves users' rights, has been fully in force for one year as of February 2025.https://tietosuoja.fi/en/-/digital-services-act-in-force-for-a-year-nearly-80-complaints-to-authorities-in-finland-in-2024
-
25.6.2025 | ANNUAL REPORT OF THE OFFICE OF THE DATA PROTECTION OMBUDSMAN OF FINLAND 2024 ANNUAL REPORT OF THE OFFICE OF THE DATA PROTECTION OMBUDSMAN OF FINLAND 2024 3 Contents The Office of the Data Protection Ombudsman safeguards the rights and freedoms of ...https://tietosuoja.fi/documents/6927448/242571942/3%20TSV%20Annual%20Report%202024%20saavutettava.pdf/c49babc0-430a-77ec-aea2-95d5cebd2885?t=1750846070262
-
4.6.2025 | The Sanctions Board of the Office of the Data Protection Ombudsman issued a EUR 1,100,000 administrative fine against the pharmacy company Yliopiston Apteekki because of data protection shortcomings found in the pharmacy’s online shop related to the use of tracking services. Data on the customers’ use of the online shop was leaked to tracking service companies through the website’s analytics tools and tracking technology.https://tietosuoja.fi/en/-/yliopiston-apteekki-fined-for-online-shop-data-protection-shortcomings
-
18.3.2024 | The Sanctions Board of the Office of the Data Protection Ombudsman has imposed an administrative fine of 856,000 euros on Verkkokauppa.com Oyj because the company had not specified the storage period of its online shop customer accounts. In addition, Verkkokauppa.com's practice of requiring the creation of a customer account for making online purchases violated data protection provisions.https://tietosuoja.fi/en/-/administrative-fine-imposed-on-verkkokauppa.com-for-failing-to-define-storage-period-of-customer-data-requiring-customers-to-register-was-also-illegal
-
28.2.2024 | On 28 February, the European Data Protection Board launched a joint measure examining how the data subjects' right of access to their data is being realised in the operations of various organisations. A total of 28 data protection authorities from various EU Member States are taking part in the study. In Finland, the situation is charted with a questionnaire for controllers.https://tietosuoja.fi/en/-/office-of-the-data-protection-ombudsman-examines-realisation-of-right-of-access-to-data-as-part-of-europe-wide-measure