Notification to the Data Protection Ombudsman
Concerning your rights
Data protection rights help you manage your data. If you would like to exercise your rights, first contact the company or organisation that is processing your data, i.e. the controller. If the controller has designated a Data Protection Officer, you can address the request to him or her.
The controller is required to reply to your request without undue delay and no later than in one full calendar month from receipt of the request. If the controller does not intend to fulfil your request, it must justify the refusal in its reply.
If you feel that the controller has refused your request without adequate grounds, you can contact the Data Protection Ombudsman. In some cases, the Data Protection Ombudsman can then order the controller to fulfil your request.
Our target time for processing cases is one year. The final processing time for an individual case will vary depending on the nature of the case.
Find out whether the Data Protection Ombudsman can help you
Answer the following questions and you will be directed to a website, which will tell you whether the Data Protection Ombudsman can be of assistance in your case. This test has been created to provide assistance in your case. Your answers will not be saved.
In some cases, the Data Protection Ombudsman can order the controller to fulfil your request.
Contact the Data Protection Ombudsman only if the controller refuses your request on grounds you consider inadequate. As a rule, the Data Protection Ombudsman will not comment on cases in which the data subject has not contacted the controller directly.
The Office of the Data Protection Ombudsman will then consider what measures will be required. We will keep you informed of the progress and resolution of the matter.
Please note that the Data Protection Ombudsman does not act as a pre-trial investigation authority. If you suspect that you have been the victim of a crime (defamation, fraud, eavesdropping or illicit observation, dissemination of information violating personal privacy, etc.), contact your local police station in the first instance. The Data Protection Ombudsman can refer your case to the police, but this is not usually the quickest option for you.
The Data Protection Ombudsman does not act as an attorney and cannot claim damages on your behalf, for example. Civil claims must be filed with the courts.
The Data Protection Ombudsman will not comment on the public or confidential nature of data. If an authority has violated the Act on the Openness of Government Activities, the competent authority can, depending on the case, be the Parliamentary Ombudsman or the Chancellor of Justice.
The Data Protection Ombudsman will only comment on questions related to employment insofar as they concern the processing of personal data.
Have you noticed a processing violation?
You can notify the Data Protection Ombudsman if you suspect that an organisation or individual is processing personal data in violation of data protection regulations.
This can mean that, for example,
- there is no legal basis for processing the personal data or
- the personal data is being processed too extensively.
The Office of the Data Protection Ombudsman will consider what measures will be required by your notification. If the matter involves the processing of your personal data, we will keep you informed of the progress and resolution of the matter. In other cases, we will only contact you if there is a special reason for it.
You can also use the form to file an anonymous notification. If you wish to do so, you can leave the contact detail fields blank. Please note that we will not be able to contact you about any decision made in the matter if you file the notification anonymously.
Find out whether the Data Protection Ombudsman can help you
Answer the following questions and you will be directed to a website, which will tell you whether the Data Protection Ombudsman can be of assistance. This test has been created to provide assistance in your case. Your answers will not be saved.