Personal Data Protection in Finland

Personal Data Protection in Finland

The collection, storage and processing of personal data are regulated by the Personal Data Act (1050/2018, as amended). The Data Protection Act specifies and supplements the EU’s General Data Protection Regulation (GDPR) and its national application. Among other things, the Act provides for the appointment, organisation and powers of the supervisory authority on data protection matters.

Privacy in work environment

The Act on the Protection of Privacy in the Work Environment (759/2004, as amended) regulates the protection of privacy in employment relationships. Furthremore, the Information Society Code (as amended 917/2014) regulates the processing of data in electronic communications.

Processing of personal data

Furthermore, the Regulation (EU) 679/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR) applies in Finland.

Principles of GDPR shortly

The GDPR contains six bases that permit the processing of personal data. These are: i) the consent of the data subject, ii) a contract, iii) the controller’s legal obligation, iv) the protection of vital interests, v) a task carried out in the public interest or the exercise of public authority, vi) and the legitimate interests of the controller or a third party.

Prohibited data to process

Special categories of personal data, such as data concerning ethnic origin or health, is principally prohibited to collect. However, such processing can be permitted if an exception to the ban on processing is provided. Such permission must be enacted in the GDPR or national legislation.

Compliance with GDPR mandatory

Compliance with the provisions of the GDPR is required when processing personal data. Accountability means that the controller must be able to demonstrate its compliance with data protection legislation and is a key principle of the GDPR.

* * *

For further information please contact your current contact person or our partner. We are pleased to provide further information on the above issues.

About us | LKOS Law Office | Personal Data Protection in Finland

LKOS Law Office is an internationally recognised high-quality boutique business law office established in Helsinki, Finland. We provide legal services to foreign and domestic companies. Furthermore, our NewLaw -concept secures that we serve all of our clients individually and by way of exceeding their preliminary expectations regarding business law services. Further to this, we are a reliable partner in a rapidly changing business environment.

In case you are interested in hearing more about our services and personnel, please do not hesitate to contact us by email or visit LKOS Law Office webpage for further information.

*This article is for general information purposes only and does not constitute a legal advice.