Recent sanctions for data protection violations in Finland, an update offered by Lexia – the exclusive law firm member of PrivacyRules for the Finnish jurisdiction. Summary from Markus Myhrberg and Erika Leinonen.
The Office of the Finnish Data Protection Ombudsman’s Sanctions Board imposed an administrative fine of 122,000 euros on a company for data protection violations and the company was issued a reprimand. The Sanctions Board especially noted that extensive processing of health data is a central part of the company’s core business.
The Data Protection Ombudsman found that the controller had informed the data subjects of the processing of their personal data but had not given enough information on the types of personal data being processed and the purposes of processing each type of personal data.
Further information: The Office of the Finnish Data Protection Ombudsman
Additional decisions by the Finnish authority: