Tietosuojavaltuutetun toimisto (Finland): Difference between revisions

Latest revision as of 09:59, 17 August 2024

Tietosuojavaltuutetun toimisto Dataombudsmannens byrå

Name:	Tietosuojavaltuutetun toimisto Dataombudsmannens byrå
Abbreviation:	Tietosuojavaltuutetun toimisto
Jurisdiction:	Finland
Head:	Anu Talus
Deputy:	Heljä-Tuulia Pihamaa Annina Hautala
Address:	Lintulahdenkuja 4 00530 Helsinki P.O. Box 800 FI-00531 Helsinki Finland
Webpage:	www.tietosuoja.fi/en/
Email:	tietosuoja@om.fi
Phone:	+358-29-56-66700
Twitter:	@Tietosuoja_DPA
Procedural Law:	Administrative Procedure Act 434/2003 (Originals in FI and SV) Data Protection Act 1050/2018 (Originals in FI and in SV)
Decision Database:	Finlex (in FI)
Translated Decisions:	Category:Tietosuojavaltuutetun toimisto (Finland)
Head Count:	54 (2023)^[1]
Budget:	€4,900,000 (2024)
Wikidata-Item:	Q5474493

The Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto in Finnish or Dataombudsmannens byrå in Swedish) is the national Data Protection Authority for Finland. It resides in Helsinki and is in charge of enforcing GDPR in Finland.

Structure

The Office of the Data Protection Ombudsman is headed by the Data Protection Ombudsman (tietosuojavaltuutettu / dataombudsman) and two Deputy Data Protection Ombudsmen (apulaistietosuojavaltuutettu / biträdande dataombudsman) who all may take decisions. They are appointed by the government for five-years terms. Collectively they form the Sanctions Board, which imposes the fines set out in the GDPR.^[2]

An independent Expert Board is also appointed by the government for three-year term, and its task is to issue statements on significant questions relating to the application of the legislation if the Data Protection Ombudsman requests so. The Board consists of the Chair, Vice-Chair, and three Members, with everyone having a personal deputy.

The Office consists of the following units: the management support and core services unit led by the Data Protection Ombudsman, the private-sector and public-sector guidance and supervision units led by the Deputy Ombudsmen, and the administrative unit led by the Head of Administration.^[1]

Procedural Information

Applicable Procedural Law

The Finnish DPA operates under the Administrative Procedure Act 434/2003 (hallintolaki / förvaltningslag). Following the GDPR, specific rules on the DPA were given in the Data Protection Act 1050/2018 (tietosuojalaki / dataskyddslag).

For the Directive (EU) 2016/680 a separate Act on the Processing of Personal Data in Criminal Matters and in Connection with Maintaining National Security 1054/2018 (rikosasioiden tietosuojalaki / dataskyddslagen för brottmål) applies.

Complaints Procedure under Art 77 GDPR

You can help us filling this section!

Ex Officio Procedures under Art 57 GDPR

You can help us filling this section!

Appeals

You can help us filling this section!

Practical Information

Filing with the DPA

You can help us filling this section!

Known Problems

You can help us filling this section!

Filing an Appeal

You can help us filling this section!

Decision Database

You can help us filling this section!

Statistics

Funding

The DPA is financed by the Finnish government and gets their budget allocation every October from the Ministry of Finance. The funding for 2024 is €4,900,000.

Historical numbers (based on the annual reports):

2023: €4,730,000
2022: €4,450,000
2021: €4,351,000
2020: €3,700,000
2019: €3,862,000
2018: €2,372,000

Personnel

In the end of 2023, the Office had 54 personnel with an average age of 42,1 years.^[1]

Historical numbers (based on the annual reports):

2022: 54
2021: 55
2020: 48
2019: 46
2018: 31

Caseload

You can help us filling this section!

Fines

In May 2020 the Sanctions Board of the Office imposed fines for the first time. The Board has imposed a total of 21 fines, the total amount of which is €3,503,400.

The largest imposed fine is €856,000 for the IT retailer Verkkokauppa.com Oyj. See Tietosuojavaltuutetun toimisto (Finland) - TSV/26/2020.

Annual Reports

The DPA's annual reports from 2018 (ongoing) are available on this page.

References

↑ ^1.0 ^1.1 ^1.2 Annual Report 2023 (in EN): https://tietosuoja.fi/documents/6927448/218217127/TSV+Annual+Report+2023.pdf
↑ tietosuoja.fi: https://tietosuoja.fi/en/office-of-the-data-protection-ombudsman

EU/EEA/UK Data Protection Authorities
Austria · Belgium · Bulgaria · Croatia · Cyprus · Czech Republic · Denmark · Estonia · Finland (Åland) · France · Germany (Baden-Württemberg · Bavaria, private sector · Bavaria, public sector · Berlin · Brandenburg · Bremen · Hamburg · Hesse · Lower Saxony · Mecklenburg-Vorpommern · North Rhine-Westphalia · Rhineland-Palatinate · Saarland · Saxony · Saxony-Anhalt · Schleswig-Holstein · Thuringia ) · Greece · Hungary · Ireland · Italy · Latvia · Lithuania · Luxembourg · Malta · Netherlands · Poland · Portugal · Romania · Slovakia · Slovenia · Spain (Basque Country · Catalonia · Andalusia)· Sweden
Iceland · Liechtenstein · Norway · United Kingdom	EDPS · EDPB

[annual_report2023-1] 1.0 ^1.1 ^1.2 Annual Report 2023 (in EN): https://tietosuoja.fi/documents/6927448/218217127/TSV+Annual+Report+2023.pdf

[2] tietosuoja.fi: https://tietosuoja.fi/en/office-of-the-data-protection-ombudsman

[1]

[2]

@@ Line 19: / Line 19: @@
 [https://www.finlex.fi/en/laki/kaannokset/2018/20181050 Data Protection Act 1050/2018]<br>(Originals in [https://www.finlex.fi/fi/laki/ajantasa/2018/20181050 FI] and in [https://www.finlex.fi/sv/laki/ajantasa/2018/20181050 SV])
 |decision db    = [https://finlex.fi/fi/viranomaiset/tsv/ Finlex (in FI)]
-|head count     = 51 (2022)<ref name="annual_report2022">Annual Report 2022 (in EN): https://tietosuoja.fi/documents/6927448/169954657/TSV+Annual+Report+2022.pdf</ref>
+|head count     = 54 (2023)<ref name="annual_report2023">Annual Report 2023 (in EN): https://tietosuoja.fi/documents/6927448/218217127/TSV+Annual+Report+2023.pdf</ref>
-|budget         = 4,627,000 € (2023)
+|budget         = €4,900,000 (2024)
 |wikidata       = Q5474493
 }}
@@ Line 31: / Line 31: @@
 An independent Expert Board is also appointed by the government for three-year term, and its task is to issue statements on significant questions relating to the application of the legislation if the Data Protection Ombudsman requests so. The Board consists of the Chair, Vice-Chair, and three Members, with everyone having a personal deputy.
-The Office consists of three customer service teams. The first one focuses on private sector and cross-border matters, the second one on the public sector and domestic cases, and the third one on law enforcement and national security matters. Other services and functions of the Office are centralised in the Administrative Unit and the Joint Functions team.<ref name="annual_report2020"/>
+The Office consists of the following units: the management support and core services unit led by the Data Protection Ombudsman, the private-sector and public-sector guidance and supervision units led by the Deputy Ombudsmen, and the administrative unit led by the Head of Administration.<ref name="annual_report2023" />
 ==Procedural Information==
@@ Line 65: / Line 65: @@
 === Funding ===
-''You can help us filling this section!''
+The DPA is financed by the Finnish government and gets their budget allocation every October from the Ministry of Finance. The funding for 2024 is €4,900,000.
+Historical numbers (based on the annual reports):
+* 2023: €4,730,000
+* 2022: €4,450,000
+* 2021: €4,351,000
+* 2020: €3,700,000
+* 2019: €3,862,000
+* 2018: €2,372,000
+=== Personnel ===
+In the end of 2023, the Office had 54 personnel with an average age of 42,1 years.<ref name="annual_report2023" />
+Historical numbers (based on the annual reports):
-=== Personal ===
+* 2022: 54
-In the end of 2020, the Office had 48 personnel with an average age of 39,9 years. The personnel has increased since the end of 2018 when the number was 31.<ref name="annual_report2020"/>
+* 2021: 55
+* 2020: 48
+* 2019: 46
+* 2018: 31
 === Caseload ===
@@ Line 74: / Line 91: @@
 === Fines ===
-In May 2020 the Sanctions Board of the Office imposed fines for the first time. In total five (5) fines were given in 2020 which were for amount of 207,500 € in combined.<ref name="annual_report2020"/>.
+In May 2020 the Sanctions Board of the Office imposed fines for the first time. The Board has imposed a total of 21 fines, the total amount of which is €3,503,400.
-The largest fine ever imposed was a fine of 750,000 € for the debt collection agency  Alektum Oy. See [[Tietosuojavaltuutetun toimisto (Finnland) - 6633/182/2018, 6707/154/2018 and 7685/152/2020]]
+The largest imposed fine is €856,000 for the IT retailer Verkkokauppa.com Oyj. See [[Tietosuojavaltuutetun toimisto (Finland) - TSV/26/2020]].
 === Annual Reports ===
-''You can help us filling this section!''
+The DPA's annual reports from 2018 (ongoing) are available [https://tietosuoja.fi/en/archive on this page].
 == References ==