Search

Your search for 'Information' returned 405 results
Fess search
  1. Accountability in scientific research The controller must be prepared to demonstrate that data protection regulations have been taken into account in the study. Researchers must document the implementation of data-protection principles and other p...
    https://tietosuoja.fi/en/accountability-in-scientific-research
  2. Choosing the processing basis and ensuring its lawfulness in scientific research As a rule, the controller is free to choose the basis for processing that is most applicable to the implementation of the study. The processing of special categories ...
    https://tietosuoja.fi/en/choosing-the-processing-basis-and-ensuring-its-lawfulness
  3. Defining the research scheme and purpose for processing personal data Processing personal data for purposes of scientific research must comply with the requirement of purpose limitation. The purpose of processing personal data must be planned and ...
    https://tietosuoja.fi/en/defining-the-research-scheme-and-purpose-for-processing-personal-data
  4. 17.1.2023 | The Deputy Data Protection Ombudsman has issued a reprimand to the libraries of the cities of Helsinki, Espoo, Vantaa and Kauniainen for infringements of data protection legislation in the processing of personal data. The websites of the Capital Region's Helmet libraries have used tracking technologies that may have conveyed data on, for example, the books and other materials searched for by users to third parties. Personal data has also been unlawfully transferred to the United States.
    https://tietosuoja.fi/en/-/deputy-data-protection-ombudsman-issues-reprimand-for-conveying-library-search-information-to-us-based-google
  5. Data protection principles The data protection principles must always be observed when processing personal data . The controller must also be able to demonstrate the effective implementation of the data protection principles in the processing of p...
    https://tietosuoja.fi/en/data-protection-principles
  6. Rights of the data subject When a controller processes personal data, it must take appropriate measures to ensure that the data protection rights of data subjects are fulfilled. Controllers are also required facilitate the exercise of the data sub...
    https://tietosuoja.fi/en/rights-of-the-data-subject
  7. European cooperation The Office of the Data Protection Ombudsman is an active member of the European Data Protection Board (EDPB). The EDPB promotes cooperation between European data protection authorities and the consistent application of data pr...
    https://tietosuoja.fi/en/european-cooperation
  8. Scientific research and data protection Taking care of data protection builds trust in research subjects and is a requirement for the success of any study. It is essential to plan the processing of personal data for its entire lifespan before the ...
    https://tietosuoja.fi/en/scientific-research-and-data-protection
  9. Frequently asked questions about the internet Is the controller entitled to publish personal data from its personal data file on its website? Personal data stored in a personal data file may only be published on the internet with the consent of th...
    https://tietosuoja.fi/en/faq-internet
  10. Lecture requests The Office of the Data Protection Ombudsman’s experts can be invited to give lectures at training events held by stakeholders and other organisations. As a rule, such lectures are subject to a fee. The fees are based on the Act on...
    https://tietosuoja.fi/en/lecture-requests
  11. Purpose limitation The purpose of processing personal data must be planned and defined clearly before the start of processing. Personal data may only be collected and processed for a specific and lawful purpose. The data may not be processed in a ...
    https://tietosuoja.fi/en/purpose-limitation
  12. Derogations for specific situations Article 49 of the General Data Protection Regulation provides for derogations for specific situations. They are a last-resort basis for data transfer, only applicable in exceptional cases . The transfer of data ...
    https://tietosuoja.fi/en/derogations-for-specific-situations
  13. Find out whether the Data Protection Ombudsman can help you What do you want to do? I want to obtain information on the processing of my personal data. I want access to my personal data I want to rectify my personal data. I want to erase my person...
    https://tietosuoja.fi/en/en/find-out-whether-the-data-protection-ombudsman-can-help-you-rights
  14. Current issues Supreme Administrative Court upholds the administrative fine imposed on Verkkokauppa.com for data protection violations Publication date: 12.6.2026 Deputy Data Protection Ombudsman: individuals must be able to access their credit in...
    https://tietosuoja.fi/en/current-issues
  15. Data protection officers A data protection officer is an expert within the organisation, who monitors the processing of personal data and provides advice on compliance with data protection regulations. The data protection officer monitors complian...
    https://tietosuoja.fi/en/data-protection-officers
  16. Processors A processor is an individual or an organisation that processes personal data on behalf of a controller. Processors operate according to the controller’s instructions and under its supervision. The controller determines the purposes and ...
    https://tietosuoja.fi/en/processors
  17. Transfers on the basis of an adequacy decision Personal data can be transferred out of the European Union and European Economic Area if the European Commission has issued a decision on an adequate level of protection for personal data (‘adequacy d...
    https://tietosuoja.fi/en/transfers-on-the-basis-of-an-adequacy-decision
  18. The processing of personal data at the Office of the Data Protection Ombudsman
    https://tietosuoja.fi/en/our-data-protection-policy
  19. Frequently asked questions about the Digital Services Act (DSA) What kinds of operators are subject to the DSA's obligations? The obligations imposed by the Digital Services Act (DSA) apply to all online services, referred to as 'intermediary serv...
    https://tietosuoja.fi/en/digital-services-act-dsa-
  20. Accessibility statement of Tietosuoja.fi This accessibility statement applies to the website www.tietosuoja.fi and it was created on 22 September 2020. The statement has been updated on 20 January 2026. We are committed to providing accessibility ...
    https://tietosuoja.fi/en/accessibility-statement