Finland
Summary
Law: The Data Protection Act (1050/2018) (the Data Protection Act) and the General Data Protection Regulation (Regulation (EU) 2016/679) (GDPR)
Regulator: Office of the Data Protection Ombudsman (the Ombudsman)
Summary: Finland implemented the GDPR in 2019 through the Data Protection Act (the Act) which entered into force on January 1, 2019, and repealed the old Personal Data Act (523/1999).
In addition, the GDPR has led to amendments to other legislation regarding the processing of personal data such as the Act on the Protection of Privacy in Working Life (759/2004) as amended in 2019, the Criminal Code (39/1889) (the Criminal Code), the Act on Enforcement of Fines (672/2002) (only available in Finnish here), and the Act on Grey Economy Information Unit (1207/2010) (only available in Finnish here).
The Office of the Data Protection Ombudsman (the Ombudsman) acts as the Finnish supervisory authority about the GDPR and its supplementing legislation. The Ombudsman has published guidance as it relates to data breach notification obligations and has been active in imposing fines and corrective actions for GDPR violations.
Browse more content in Finland
News
Insights
Send us your Feedback!
Please let us know what you think of DataGuidance! It will only take 60 seconds and help us make the site better for you.
