Tietosuojavaltuutetun toimisto (Finland): Difference between revisions
Nuolihaukka (talk | contribs) (DPAbox, more info on the structure, applicable procedural law, fines, and personnel) |
|||
| Line 1: | Line 1: | ||
{ | {{DPAbox | ||
|logo = [[File:logoFI.png|center|250px]] | |||
|geo = Finland | |||
| | |subgeo = <!-- OPTIONAL --> | ||
|name = Tietosuojavaltuutetun toimisto<br>''Dataombudsmannens byrå'' | |||
|- | |abbreviation = Tietosuojavaltuutetun toimisto | ||
| | |head = Anu Talus | ||
| | |deputy = Jari Råman<br>Heljä-Tuulia Pihamaa | ||
| | |address = P.O. Box 800<br>FI-00521 Helsinki<br>Finland | ||
|- | |webpage = [http://www.tietosuoja.fi/en/ www.tietosuoja.fi/en/] | ||
| | |email = tietosuoja@om.fi | ||
|phone = +358-29-56-66700 | |||
|- | |twitter = Tietosuoja_DPA | ||
| | |procedural law = | ||
| | [https://www.finlex.fi/en/laki/kaannokset/2003/en20030434 Administrative Procedure Act 434/2003]<br>(Originals in [https://www.finlex.fi/fi/laki/ajantasa/2003/20030434 FI] and [https://www.finlex.fi/sv/laki/ajantasa/2003/20030434 SV]) | ||
[https://www.finlex.fi/en/laki/kaannokset/2018/20181050 Data Protection Act 1050/2018]<br>(Originals in [https://www.finlex.fi/fi/laki/ajantasa/2018/20181050 FI] and in [https://www.finlex.fi/sv/laki/ajantasa/2018/20181050 SV]) | |||
|decision db = [https://finlex.fi/fi/viranomaiset/tsv/ Finlex (in FI)] | |||
|head count = 48 (2020)<ref name="annual_report2020">Annual Report 2020 (in EN): https://tietosuoja.fi/documents/6927448/92481282/Office+of+the+Data+Protection+Ombudsman+Annual+Report+2020.pdf</ref> | |||
|budget = 3,790,000 € (2021) | |||
|wikidata = Q5474493 | |||
}} | |||
The Office of the Data Protection Ombudsman (''Tietosuojavaltuutetun toimisto'' in Finnish or ''Dataombudsmannens byrå'' in Swedish) is the national Data Protection Authority for Finland. It resides in Helsinki and is in charge of enforcing GDPR in Finland. | |||
The Office of the Data Protection Ombudsman ('' | ==Structure== | ||
The Office of the Data Protection Ombudsman is headed by the Data Protection Ombudsman (''tietosuojavaltuutettu'' / ''dataombudsman'') and two Deputy Data Protection Ombudsmen (''apulaistietosuojavaltuutettu'' / ''biträdande dataombudsman'') who all may take decisions. They are appointed by the government for five-years terms. Collectively they form the Sanctions Board, which imposes the fines set out in the GDPR.<ref>tietosuoja.fi: https://tietosuoja.fi/en/office-of-the-data-protection-ombudsman</ref> | |||
= | An independent Expert Board is also appointed by the government for three-year term, and its task is to issue statements on significant questions relating to the application of the legislation if the Data Protection Ombudsman requests so. The Board consists of the Chair, Vice-Chair, and three Members, with everyone having a personal deputy. | ||
The Office consists of three customer service teams. The first one focuses on private sector and cross-border matters, the second one on the public sector and domestic cases, and the third one on law enforcement and national security matters. Other services and functions of the Office are centralised in the Administrative Unit and the Joint Functions team.<ref name="annual_report2020"/> | |||
==Procedural Information== | ==Procedural Information== | ||
===Applicable Procedural Law=== | |||
The Finnish DPA operates under the [https://www.finlex.fi/en/laki/kaannokset/2003/en20030434 Administrative Procedure Act 434/2003] (''hallintolaki'' / ''förvaltningslag''). Following the GDPR, specific rules on the DPA were given in the [https://www.finlex.fi/en/laki/kaannokset/2018/20181050 Data Protection Act 1050/2018] (''tietosuojalaki'' / ''dataskyddslag''). | |||
For the Directive (EU) 2016/680 a separate [https://www.finlex.fi/en/laki/kaannokset/2018/en20181054 Act on the Processing of Personal Data in Criminal Matters and in Connection with Maintaining National Security 1054/2018] (''rikosasioiden tietosuojalaki'' / ''dataskyddslagen för brottmål'') applies. | |||
'' | |||
===Complaints Procedure under Art 77 GDPR=== | ===Complaints Procedure under Art 77 GDPR=== | ||
| Line 80: | Line 66: | ||
=== Personal === | === Personal === | ||
In the end of 2020, the Office had 48 personnel with an average age of 39,9 years. The personnel has increased since the end of 2018 when the number was 31.<ref name="annual_report2020"/> | |||
=== Caseload === | === Caseload === | ||
| Line 86: | Line 72: | ||
=== Fines === | === Fines === | ||
In May 2020 the Sanctions Board of the Office imposed fines for the first time. In total five (5) fines were given in 2020 which were for amount of 207,500 € in combined.<ref name="annual_report2020"/>. The largest fine ever imposed was a fine of 100,000 € for Posti, the national postal servive. See [[Tietosuojavaltuutetun toimisto - 3818/161/2020]]. | |||
=== Annual Reports === | === Annual Reports === | ||
''You can help us filling this section!'' | ''You can help us filling this section!'' | ||
== References == | |||
<references /> | |||
{{DataProtectionAuthorities}} | {{DataProtectionAuthorities}} | ||
Revision as of 19:42, 30 November 2021
| Tietosuojavaltuutetun toimisto Dataombudsmannens byrå | |
|---|---|
 | |
| Name: | Tietosuojavaltuutetun toimisto Dataombudsmannens byrå |
| Abbreviation: | Tietosuojavaltuutetun toimisto |
| Jurisdiction: | Finland |
| Head: | Anu Talus |
| Deputy: | Jari Råman Heljä-Tuulia Pihamaa |
| Address: | P.O. Box 800 FI-00521 Helsinki Finland |
| Webpage: | www.tietosuoja.fi/en/ |
| Email: | tietosuoja@om.fi |
| Phone: | +358-29-56-66700 |
| Twitter: | @Tietosuoja_DPA |
| Procedural Law: | Administrative Procedure Act 434/2003 (Originals in FI and SV) Data Protection Act 1050/2018 |
| Decision Database: | Finlex (in FI) |
| Translated Decisions: | Category:Tietosuojavaltuutetun toimisto (Finland) |
| Head Count: | 48 (2020)[1] |
| Budget: | 3,790,000 € (2021) |
| Wikidata-Item: | Q5474493 |
The Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto in Finnish or Dataombudsmannens byrå in Swedish) is the national Data Protection Authority for Finland. It resides in Helsinki and is in charge of enforcing GDPR in Finland.
Structure
The Office of the Data Protection Ombudsman is headed by the Data Protection Ombudsman (tietosuojavaltuutettu / dataombudsman) and two Deputy Data Protection Ombudsmen (apulaistietosuojavaltuutettu / biträdande dataombudsman) who all may take decisions. They are appointed by the government for five-years terms. Collectively they form the Sanctions Board, which imposes the fines set out in the GDPR.[2]
An independent Expert Board is also appointed by the government for three-year term, and its task is to issue statements on significant questions relating to the application of the legislation if the Data Protection Ombudsman requests so. The Board consists of the Chair, Vice-Chair, and three Members, with everyone having a personal deputy.
The Office consists of three customer service teams. The first one focuses on private sector and cross-border matters, the second one on the public sector and domestic cases, and the third one on law enforcement and national security matters. Other services and functions of the Office are centralised in the Administrative Unit and the Joint Functions team.[1]
Procedural Information
Applicable Procedural Law
The Finnish DPA operates under the Administrative Procedure Act 434/2003 (hallintolaki / förvaltningslag). Following the GDPR, specific rules on the DPA were given in the Data Protection Act 1050/2018 (tietosuojalaki / dataskyddslag).
For the Directive (EU) 2016/680 a separate Act on the Processing of Personal Data in Criminal Matters and in Connection with Maintaining National Security 1054/2018 (rikosasioiden tietosuojalaki / dataskyddslagen för brottmål) applies.
Complaints Procedure under Art 77 GDPR
You can help us filling this section!
Ex Officio Procedures under Art 57 GDPR
You can help us filling this section!
Appeals
You can help us filling this section!
Practical Information
Filing with the DPA
You can help us filling this section!
Known Problems
You can help us filling this section!
Filing an Appeal
You can help us filling this section!
Decision Database
You can help us filling this section!
Statistics
Funding
You can help us filling this section!
Personal
In the end of 2020, the Office had 48 personnel with an average age of 39,9 years. The personnel has increased since the end of 2018 when the number was 31.[1]
Caseload
You can help us filling this section!
Fines
In May 2020 the Sanctions Board of the Office imposed fines for the first time. In total five (5) fines were given in 2020 which were for amount of 207,500 € in combined.[1]. The largest fine ever imposed was a fine of 100,000 € for Posti, the national postal servive. See Tietosuojavaltuutetun toimisto - 3818/161/2020.
Annual Reports
You can help us filling this section!
References
- ↑ 1.0 1.1 1.2 1.3 Annual Report 2020 (in EN): https://tietosuoja.fi/documents/6927448/92481282/Office+of+the+Data+Protection+Ombudsman+Annual+Report+2020.pdf
- ↑ tietosuoja.fi: https://tietosuoja.fi/en/office-of-the-data-protection-ombudsman
| EU/EEA/UK Data Protection Authorities | |
|---|---|
| Austria · Belgium · Bulgaria · Croatia · Cyprus · Czech Republic · Denmark · Estonia · Finland (Åland) · France · Germany (Baden-Württemberg · Bavaria, private sector · Bavaria, public sector · Berlin · Brandenburg · Bremen · Hamburg · Hesse · Lower Saxony · Mecklenburg-Vorpommern · North Rhine-Westphalia · Rhineland-Palatinate · Saarland · Saxony · Saxony-Anhalt · Schleswig-Holstein · Thuringia ) · Greece · Hungary · Ireland · Italy · Latvia · Lithuania · Luxembourg · Malta · Netherlands · Poland · Portugal · Romania · Slovakia · Slovenia · Spain (Basque Country · Catalonia · Andalusia)· Sweden | |
| Iceland · Liechtenstein · Norway · United Kingdom | EDPS · EDPB |
