View source for Tietosuojavaltuutetun toimisto (Finland)

{{DPAbox
|logo           = [[File:logoFI.png|center|250px]]
|geo            = Finland
|subgeo         = <!-- OPTIONAL -->
|name           = Tietosuojavaltuutetun toimisto<br>''Dataombudsmannens byrå''
|abbreviation   = Tietosuojavaltuutetun toimisto
|head           = Anu Talus
|deputy         = Heljä-Tuulia Pihamaa<br>Annina Hautala
|address        = Lintulahdenkuja 4<br>00530 Helsinki

P.O. Box 800<br>FI-00531 Helsinki<br>Finland
|webpage        = [http://www.tietosuoja.fi/en/ www.tietosuoja.fi/en/]
|email          = tietosuoja@om.fi
|phone          = +358-29-56-66700
|twitter        = Tietosuoja_DPA
|procedural law =
[https://www.finlex.fi/en/laki/kaannokset/2003/en20030434 Administrative Procedure Act 434/2003]<br>(Originals in [https://www.finlex.fi/fi/laki/ajantasa/2003/20030434 FI] and [https://www.finlex.fi/sv/laki/ajantasa/2003/20030434 SV])

[https://www.finlex.fi/en/laki/kaannokset/2018/20181050 Data Protection Act 1050/2018]<br>(Originals in [https://www.finlex.fi/fi/laki/ajantasa/2018/20181050 FI] and in [https://www.finlex.fi/sv/laki/ajantasa/2018/20181050 SV])
|decision db    = [https://finlex.fi/fi/viranomaiset/tsv/ Finlex (in FI)]
|head count     = 54 (2023)<ref name="annual_report2023">Annual Report 2023 (in EN): https://tietosuoja.fi/documents/6927448/218217127/TSV+Annual+Report+2023.pdf</ref>
|budget         = €4,900,000 (2024)
|wikidata       = Q5474493
}}

The Office of the Data Protection Ombudsman (''Tietosuojavaltuutetun toimisto'' in Finnish or ''Dataombudsmannens byrå'' in Swedish) is the national Data Protection Authority for Finland. It resides in Helsinki and is in charge of enforcing GDPR in Finland.

==Structure==
The Office of the Data Protection Ombudsman is headed by the Data Protection Ombudsman (''tietosuojavaltuutettu'' / ''dataombudsman'') and two Deputy Data Protection Ombudsmen (''apulaistietosuojavaltuutettu'' / ''biträdande dataombudsman'') who all may take decisions. They are appointed by the government for five-years terms. Collectively they form the Sanctions Board, which imposes the fines set out in the GDPR.<ref>tietosuoja.fi: https://tietosuoja.fi/en/office-of-the-data-protection-ombudsman</ref>

An independent Expert Board is also appointed by the government for three-year term, and its task is to issue statements on significant questions relating to the application of the legislation if the Data Protection Ombudsman requests so. The Board consists of the Chair, Vice-Chair, and three Members, with everyone having a personal deputy.

The Office consists of the following units: the management support and core services unit led by the Data Protection Ombudsman, the private-sector and public-sector guidance and supervision units led by the Deputy Ombudsmen, and the administrative unit led by the Head of Administration.<ref>https://tietosuoja.fi/documents/6927448/218217127/TSV+Annual+Report+2023.pdf</ref>

==Procedural Information==
===Applicable Procedural Law===
The Finnish DPA operates under the [https://www.finlex.fi/en/laki/kaannokset/2003/en20030434 Administrative Procedure Act 434/2003] (''hallintolaki'' / ''förvaltningslag''). Following the GDPR, specific rules on the DPA were given in the [https://www.finlex.fi/en/laki/kaannokset/2018/20181050 Data Protection Act 1050/2018] (''tietosuojalaki'' / ''dataskyddslag'').

For the Directive (EU) 2016/680 a separate [https://www.finlex.fi/en/laki/kaannokset/2018/en20181054 Act on the Processing of Personal Data in Criminal Matters and in Connection with Maintaining National Security 1054/2018] (''rikosasioiden tietosuojalaki'' / ''dataskyddslagen för brottmål'') applies.

===Complaints Procedure under Art 77 GDPR===
''You can help us filling this section!''

===''Ex Officio'' Procedures under Art 57 GDPR===
''You can help us filling this section!''

===Appeals===
''You can help us filling this section!''

==Practical Information==

=== Filing with the DPA ===
''You can help us filling this section!''

=== Known Problems ===
''You can help us filling this section!''

=== Filing an Appeal ===
''You can help us filling this section!''

==Decision Database==
''You can help us filling this section!''

==Statistics==

=== Funding ===
The DPA is financed by the Finnish government and gets their budget allocation every October from the Ministry of Finance. The funding for 2024 is €4,900,000.

Historical numbers (based on the annual reports):

* 2023: €4,730,000
* 2022: €4,450,000
* 2021: €4,351,000
* 2020: €3,700,000
* 2019: €3,862,000
* 2018: €2,372,000

=== Personnel ===
In the end of 2023, the Office had 54 personnel with an average age of 42,1 years.<ref name="annual_report2023" />

Historical numbers (based on the annual reports):

* 2022: 54
* 2021: 55
* 2020: 48
* 2019: 46
* 2018: 31

=== Caseload ===
''You can help us filling this section!''

=== Fines ===
In May 2020 the Sanctions Board of the Office imposed fines for the first time. The Board has imposed a total of 21 fines, the total amount of which is €3,503,400.

The largest imposed fine is €856,000 for the IT retailer Verkkokauppa.com Oyj. See [[Tietosuojavaltuutetun toimisto (Finland) - TSV/26/2020]].

=== Annual Reports ===
The DPA's annual reports from 2018 (ongoing) are available [https://tietosuoja.fi/en/archive on this page].

== References == 
<references />

{{DataProtectionAuthorities}}