Finnish Data Protection Act

The Act specifies and supplements the GDPR in Finland: legal bases for processing in certain situations, the processing of personal identity codes, the status and powers of the Data Protection Ombudsman and sanctions. It is read alongside the Regulation, not instead of it.

Share this page

Reference

Reference: 1050/2018
In force: 2019-01-01
Area: Data protection
Supervision: Tietosuojavaltuutetun toimisto
Publisher: Finlex
Checked: 2026-09-10

We publish metadata, not statute text.

Open the official text ↗Yleinen tietosuoja-asetus (EU) 2016/679 ↗

Supervision

Tietosuojavaltuutetun toimisto1 · Acts supervised

Questions

When must a data breach be reported to the Finnish Data Protection Ombudsman?GDPR Articles 33 and 34, together with the Finnish Data Protection Act May a company process a Finnish personal identity code?Finnish Data Protection Act, section 29

Related acts

Finnish Limited Liability Companies Act624/2006
Finnish Accounting Act1336/1997
Finnish Auditing Act1141/2015
Finnish Employment Contracts Act55/2001
Finnish Annual Holidays Act162/2005

Next step

Three ways to put the register to work in your own practice.

Book a walkthrough Pricing and terms API and datasets

Start with your task

Litigation
Find support in a judgment
Search guiding decisions, see what became final and follow changes in the law.
In-house, deals
Map the rules in a transaction
Move from theme to act and on to the article that carries the duty.
Compliance
Assess the risk in a process
Risk scoring per legal area, with the sources behind every score.