Haku

Accessibility statement of Tietosuoja.fi This accessibility statement applies to the website www.tietosuoja.fi and it was created on 22 September 2020. The statement has been updated on 20 January 2026. We are committed to providing accessibility ...

Annual report 2024 The Office of the Data Protection Ombudsman safeguards the rights and freedoms of individuals with regard to the processing of personal data The Office of the Data Protection Ombudsman is an autonomous and independent authority ...

Duties of the Data Protection Ombudsman supervising compliance with data protection legislation and other laws concerning the processing of personal data promoting awareness of the risks, rules, safeguards, obligations and rights related to the pr...

We promote responsibility in the digital environment The Office of the Data Protection Ombudsman safeguards the rights and freedoms of individuals with regard to the processing of personal data. We build awareness of the rights, duties and opportu...

Right to erasure In certain cases, the data subject has the right to have the controller erase data concerning him or her without undue delay. This right is also known as the right to be forgotten. The controller is obligated to erase the personal...

4.7.2025 | On 1–2 July, the European Data Protection Board met in Helsinki for a two-day high level meeting to discuss common outlines for future work. In the statement issued at the meeting, the data protection authorities agreed on new measures to facilitate compliance with data protection regulations, to increase dialogue with stakeholders and to develop cooperation between authorities in different sectors.

Office of the Data Protection Ombudsman The Office of the Data Protection Ombudsman safeguards your data protection rights The Data Protection Ombudsman is a national supervisory authority which supervises the compliance with data protection legis...

When is the processing of personal data permitted? Legal bases for processing personal data The processing of personal data always requires a legal basis, which must be determined before the start of processing. Once the processing of personal dat...

Choosing the processing basis and ensuring its lawfulness in scientific research As a rule, the controller is free to choose the basis for processing that is most applicable to the implementation of the study. The processing of special categories ...

The right to rectification Data subjects have the right to demand the rectification of inaccurate personal data concerning them and to have incomplete personal data completed. How quickly is the controller required to reply to the data subject’s r...

The review and approval of codes of conduct at the Office of the Data Protection Ombudsman The Office of the Data Protection Ombudsman reviews and approves national codes of conduct applied in Finland. The criteria for the content of codes of cond...

Consent of the data subject Consent is one possible legal basis for processing personal data. Consent gives the data subjects the opportunity to monitor the processing of their personal data and influence it by withdrawing their consent. Requireme...

Personal data breaches What is a personal data breach? A personal data breach means an event leading to the destruction, loss, alteration or unauthorised disclosure of, or access to, personal data. Examples of personal data breaches include lost d...

Right of access Data subjects have the right to receive confirmation from the controller on whether or not the controller is processing personal data that concerns them. The data subjects thus have the opportunity to evaluate and ensure the legali...

Frequently asked questions about working life What personal data on employees and job applicants can an employer process? The employer may only process personal data that is directly necessary with regard to the employee's employment relationship,...

4.7.2025 | Euroopan tietosuojaneuvosto kokoontui 1.–2. heinäkuuta Helsingissä kaksipäiväiseen tapaamiseen keskustelemaan yhteisistä linjoista tulevalle työlle. Tapaamisessa annetussa julkilausumassa tietosuojaviranomaiset sopivat uusista toimenpiteistä, joilla helpotetaan tietosuojasääntelyn noudattamista, lisätään vuoropuhelua sidosryhmien kanssa ja kehitetään yhteistyötä eri alojen viranomaisten välillä.

Frequently asked questions about health care Rectifying patient records How can I rectify my patient records? If there are errors in your patient records, you can ask for their rectification. The rectification request is made to the health care un...

4.7.2025 | Europeiska dataskyddsstyrelsen sammanträdde den 1–2 juli i Helsingfors för att diskutera de gemensamma riktlinjerna för det kommande arbetet. I det uttalande som gavs vid mötet kom dataskyddsmyndigheterna överens om nya åtgärder för att underlätta efterlevnaden av dataskyddsregleringen, öka dialogen med intressentgrupperna och utveckla samarbetet mellan myndigheter inom olika branscher.

25.6.2025 | ANNUAL REPORT OF THE OFFICE OF THE DATA PROTECTION OMBUDSMAN OF FINLAND 2024 ANNUAL REPORT OF THE OFFICE OF THE DATA PROTECTION OMBUDSMAN OF FINLAND 2024 3 Contents The Office of the Data Protection Ombudsman safeguards the rights and freedoms of ...

16.10.2024 | Euroopan tietosuojaneuvosto on lokakuun täysistunnossaan antanut lausunnon, jossa se selkeyttää vaatimuksia, jotka rekisterinpitäjän on huomioitava, kun se käyttää henkilötietojen käsittelijöitä. Tietosuojaneuvosto lausui lisäksi Euroopan parlamentin ja neuvoston lisäyksistä komission asetusehdotukseen, jolla on tarkoitus sujuvoittaa eurooppalaisten tietosuojaviranomaisten yhteistyötä rajat ylittävien asioiden käsittelyssä.