Tietosuojavaltuutetun toimisto (Finland) - 9209/157/2019
From GDPRhub
| Tietosuojavaltuutetun toimisto - 9209/157/2019 | |
|---|---|
 | |
| Authority: | Tietosuojavaltuutetun toimisto (Finland) |
| Jurisdiction: | Finland |
| Relevant Law: | Article 12(4) GDPR Article 17(3) GDPR Article 21(2) GDPR Article 21(3) GDPR Article 25(2) GDPR Article 58(2)(b) GDPR |
| Type: | Complaint |
| Outcome: | Partly Upheld |
| Started: | |
| Decided: | 22.01.2021 |
| Published: | 17.02.2021 |
| Fine: | None |
| Parties: | n/a |
| National Case Number/Name: | 9209/157/2019 |
| European Case Law Identifier: | n/a |
| Appeal: | n/a |
| Original Language(s): | Finnish |
| Original Source: | Finlex (in FI) |
| Initial Contributor: | V |
Y
English Summary
Facts
Y
Dispute
Holding
Y
Comment
Share your comments here!
Further Resources
Share blogs or news articles here!
English Machine Translation of the Decision
The decision below is a machine translation of the Finnish original. Please refer to the Finnish original for more details.
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="fi" lang="fi"><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><meta http-equiv="X-UA-Compatible" content="IE=edge" /><title> Data Protection Officer 22.1.2021 - FINLEX ® </title><meta name="description" content="Finlex ® is a public and free Internet service for legal material owned by the Ministry of Justice." /><meta name="DC.Title" content="FINLEX ® - Tietosuojavaltuutettu 22.1.2021" /><meta name="DC.Language" content="fi" /><meta name="DC.Identifier" content="/fi/viranomaiset/tsv/2021/20210724" /><meta name="DC.Publisher" content="Oikeusministeriö" /><meta name="DC.Subject" content="Riittävistä toimenpiteistä huolehtiminen rekisteröidyn oikeuksien toteuttamiseksi" /><link rel="Shortcut Icon" href="/favicon.ico" type="image/x-icon" /><link rel="apple-touch-icon" href="/assets/img/touch-icon.png" type="image/png" /><link rel="image_src" href="/assets/img/logo-144x118.png" /><link rel="stylesheet" href="/assets/css/fonts.css" type="text/css" media="all" /><link rel="stylesheet" href="/assets/css/screen.css" type="text/css" media="screen, projection" /><link rel="stylesheet" href="/assets/css/finlex.css" type="text/css" media="screen, projection" /><link rel="stylesheet" href="/assets/css/print.css" type="text/css" media="print" /><!--[if lt IE 8]> <link href="/assets/css/ie.css" media="screen" rel="stylesheet" type="text/css" /><![endif]--><script type="text/javascript" src="/assets/js/mootools-core-1.4.1.js"></script><script type="text/javascript" src="/assets/js/finlex.js"></script><link rel="search" type="application/opensearchdescription+xml" title="Finlex ® Search everything" href="/fi/opensearch/kaikki/" /><link rel="search" type="application/opensearchdescription+xml" title="Finlex ® Up-to-date legislation search" href="/fi/opensearch/ajantasa/" /><link rel="search" type="application/opensearchdescription+xml" title="Finlex ® Case Law Search" href="/fi/opensearch/oikeus/" /><link rel="search" type="application/opensearchdescription+xml" title="Finlex ® Authorities Search" href="/fi/opensearch/viranomaiset/" /></head><body id="lang-fi"><div id="header"><div id="header-content" class="container"><h1> <a href="/fi/" title="Finlex"><span>Finlex ®</span></a></h1><div id="lang" title="Select language"><ul><li class="choose-lang-fi"> <a href="/fi/">In Finnish</a></li><li class="choose-lang-sv"> <a href="/sv/">In Swedish</a></li><li class="choose-lang-en"> <a href="/en/">In English</a></li></ul></div><div class="siirry"> <a class="skip" href="#skip">Skip to content</a></div><div id="locationBar0" title="You are here:"> <span class="skip">You are here:</span> <a class="home" href="/fi/">Finlex</a> › <a href="/fi/viranomaiset/">Authorities</a> › <a href="/fi/viranomaiset/tsv/">Data Protection Supervisor</a> › <a href="../2021/" title="Data Protection Supervisor 2021">2021</a> › <span title="The Data Protection Officer on 22 January 2021">22.1.2021</span></div><div id="navi-container"><ul id="navi"><li> <a href="/fi/">front page</a></li><li> <a href="/fi/laki/" accesskey="l">Legislation</a></li><li> <a href="/fi/oikeus/" accesskey="o">Case law</a></li><li class="selected"> <a href="/fi/viranomaiset/" accesskey="v">Authorities</a></li><li> <a href="/fi/sopimukset/" accesskey="s">Government contracts</a></li><li> <a href="/fi/esitykset/" accesskey="e">Government proposals</a></li><li> <a href="http://julkaisut.finlex.fi" accesskey="j">Proceedings</a></li></ul></div></div><div id="section-header"><div id="search"><h3 class="title search"> Search the material </h3><form action="/fi/viranomaiset/tsv/haku/" method="get"><div class="search"><input type="hidden" name="search[type]" value="pika" /><input title="Keyword..." type="text" name="search[pika]" class="search-phrase" value="" accesskey="h" /></div><input type="submit" name="submit" class="submit" value="Search ›" /><p class="search-example"> Search the text for eg personal * and give up *. As a Keyword Break *. Also try <a href="/fi/viranomaiset/tsv/haku/">Advanced Search</a> . See <a href="/fi/ohjeet">instructions</a> .</p></form></div><div class="info"><div class="container"><div id="breadcrumbs"> <span class="skip">You are here:</span> <a class="home" href="/fi/">Finlex</a> › <a href="/fi/viranomaiset/">Authorities</a> › <a href="/fi/viranomaiset/tsv/">Data Protection Supervisor</a> › <a href="../2021/" title="Data Protection Supervisor 2021">2021</a> › <span title="The Data Protection Officer on 22 January 2021">22.1.2021</span> </div></div></div></div></div><div id="main"><div id="main-content"><div id="document-header"><h2 id="skip" title="FINLEX ® - Data Protection Officer 22.1.2021"> 1/22/2021</h2></div><div id="document"><div id="oikeus-tsv"><h3 class="asiasanat"> Ensuring adequate measures to enforce the data subject's rights</h3><table class="metadata"><tr><th style="vertical-align:text-top"> Keywords:</th><td> Right to delete data<br/> Direct marketing<br/> Personal information<br/></td></tr><tr><th> Legal basis:</th><td> Decision under the EU General Data Protection Regulation</td></tr><tr><th> Diary number:</th><td> Dnro 9209/157/2019</td></tr></table><h4 id="OT1"> Thing</h4><p> The right to have data deleted and the right to object to the processing of personal data for direct marketing</p><h4 id="OT2"> Applicant 's claims and reasons</h4><p> On 27 November 2019, the Finnish Competition and Consumer Authority transferred the applicant's case partly to the Office of the Data Protection Commissioner pursuant to section 21 of the Administrative Procedure Act (434/2003).</p><p> The applicant's case concerns the data subject's rights under Articles 17 and 21 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the free movement of personal data and the free movement of such data and repealing Directive 95/46 / EC (General Data Protection Regulation). At the request of the applicant, the controller has not exercised the applicant's right under Article 21 (2) of the General Data Protection Regulation to object to the processing of personal data for direct marketing, even though the controller has twice indicated that it prohibits direct marketing to the applicant.</p><p> In addition, the applicant has asked the controller to delete all personal data of the applicant. The controller has refused to delete the data due to the controller 's obligation to retain personal data.</p><h4 id="OT3"> Statement received from the applicant</h4><p> In 2014, the applicant purchased eyeglasses and sunglasses from the registrar's optician's shop. The applicant has started receiving contacts from the registrar in late 2017 - early 2018. As a result, on 7 March 2018, the applicant has asked the registrar to delete the applicant's data and asked the registrar to stop communicating with the applicant. The registrar has replied to the applicant, stating that the controller has tried to reach the applicant by telephone due to an invitation to an eye examination, and at the same time stated that he has entered a ban on direct marketing in the applicant's data. Despite the ban on direct marketing subscribed by the registrar, the applicant has received a direct marketing letter from the registrar by post on 19 November 2018, after which the applicant has contacted the registrar again and requested that his data be deleted. The registrar has replied to the applicant and stated that the direct marketing was due to an IT reason.</p><p> Since then, on 22 November 2018, the applicant has still contacted the controller to return to the request for data deletion. The applicant has informed the controller that he has requested the deletion of the data twice, but has not received a reply to this request at all. The applicant has therefore submitted his request for a third time. The registrar has replied to the applicant on 23 November 2018 and stated that the registrar is not allowed by law to delete the applicant's data, as the data contains health information that the registrar must keep by law. At the same time, the data controller has stated that he has in-activated the applicant's data so that the applicant's data will no longer be visible in the shop and therefore marketing will no longer take place.</p><p> The applicant has again received a direct marketing message from the registrar via SMS on 21.11.2019 and has been in contact with the registrar as a result. The registrar has replied and stated that the applicant has been marked with a marketing ban, but due to a technical error, the applicant has still received a direct marketing message.</p><h4 id="OT4"> Statement received from the controller</h4><p> By a request for clarification dated 20 March 2020, the Office of the Data Protection Officer has requested clarification from the controller in order to clarify the applicant's case. The registrar has submitted his report on 30 June 2020.</p><p> In his statement, the controller shall state the following. The registrar's clients (optician's patients) will be sent an eye examination invitation for the next examination, generally two years after the last visit. If the patient (registered) refuses to send an eye examination invitation, this information is recorded in the store's patient information system. The data controller is currently saying that he is asking patients for consent to the storage of data</p><p> With regard to the applicant's case, the controller regrets what happened. The applicant has changed his / her surname after the applicant became a registrar's customer in 2014. The applicant's ban on direct marketing has not been properly applied in the registrar's system due to a replication file jam. However, that jam was fixed immediately when it was noticed.</p><h4 id="OT5"> Applicant 's reply</h4><p> In accordance with section 34 of the Administrative Procedure Act (434/2003), the Office of the Data Protection Commissioner has reserved the opportunity for the applicant to file a response as a result of the data controller's report. The applicant has not submitted a response by the deadline of 31.8.2020.</p><h4 id="OT6"> Choice of applicable law</h4><p> The General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council (the Data Protection Regulation) has been applicable since 25 May 2018. The act is a regulation of the law directly applicable in the Member States. The General Data Protection Regulation contains a national margin of maneuver, on the basis of which national law may supplement and clarify matters specifically defined in the Regulation. The General Data Protection Regulation is specified in the National Data Protection Act (1050/2018), which has been applied since 1 January 2019. The Data Protection Act repealed the previously valid Personal Data Act (523/1999). According to section 8 of the Data Protection Act, the Data Protection Commissioner acts as the national supervisory authority referred to in the General Data Protection Decree in connection with the Ministry of Justice.</p><p> Pursuant to Section 305 (1) (4) of the Act on Electronic Communications Services (917/2014), the Data Protection Commissioner monitors compliance with the provisions of Sections 200 and 202–204 concerning direct marketing.</p><p> The applicant has submitted a request to the controller for deletion of data and prohibition of direct marketing for the first time on 7 March 2018, ie during the application of the Personal Data Act, and for the second time on 19 November 2018, ie during the application of the General Data Protection Regulation. For the third time, the applicant has submitted a request for a ban on direct marketing on 21 November 2019, ie during the application of the General Data Protection Regulation and the Data Protection Act. The applicant's case was initiated at the Office of the Data Protection Commissioner on 27 November 2019.</p><p> Pursuant to section 38 (3) of the Data Protection Act, the provisions of Articles 12 and 15-18 of the General Data Protection Regulation, which impose more extensive obligations on the controller than required by the provisions in force when the Data Protection Act enters into force, do not apply in a case concerning <em>the exercise of the right of inspection or rectification of data if:</em> the application of these provisions of the Data Protection Regulation would be unreasonable for the controller. As the applicant's case has been initiated after the application of the Data Protection Act, the transitional provision pursuant to section 38 (3) of the Data Protection Act will not apply to the right to delete data.</p><p> However, the changed legislation must be taken into account. A key principle in EU law is the principle of legal certainty. A number of judgments of the European Court of Justice have led to a ban on the application of retroactive legislation from this principle. According to that prohibition, acts of European Union law do not, as a general rule, have retroactive effect.</p><p> In that regard, the case - law has identified two types of retroactivity: actual retroactivity and material retroactivity. Effective retroactivity refers to the application of new legislation to a fact that has fully materialized during the old legislation. In the case law of the European Court of Justice, such de facto retroactivity is in principle prohibited.</p><p> Substantive retroactivity refers to the application of new legislation with future effects in a situation that has arisen while the previous legislation was in force, and legally relevant activities will continue during the new legislation. The European Court of Justice has accepted such material retroactivity. The Court has ruled that EU law must be regarded as having legal effects when it enters into force, even when the new legislation determines the consequences of situations which began during the old legislation. The Court has also drawn attention to the need for legal protection for individuals when assessing the permissibility of retroactive legislation.</p><p> In the present case, the conduct complained of, namely that the controller did not exercise the applicant's right under Article 12 (4) of the General Data Protection Regulation in refusing to comply with the applicant's request for deletion under Article 17 and did not stop sending direct marketing at the applicant's request, arose from previous legislation: during the Personal Data Act, and activities have continued since the entry into force of the General Data Protection Regulation. As legally relevant activities have continued during the new legislation, the general data protection regulation will apply.</p><h4 id="OT7"> Applicable law</h4><h5 id="OT8"> General privacy setting</h5><p> Article 12 (1) of the General Data Protection Regulation requires the controller to take appropriate measures to provide the data subject with the information under Articles 13 and 14 and all processing data under Articles 15 to 22 and 34 in a concise, transparent, easily understandable and accessible format in clear and simple language. especially when the information is intended specifically for a child. According to Article 12 (4) of the General Data Protection Regulation, if the controller does not act on a data subject's request, the controller shall inform the data subject without delay and at the latest within one month of receipt of the request, of the possibility to lodge a complaint with the supervisory authority and other remedies.</p><p> Under Article 17 (3) (b) of the General Data Protection Regulation, the controller is not obliged to delete personal data if their processing is necessary to comply with a statutory obligation under the law of a Member State to process them.</p><p> Under Article 21 (2) of the General Data Protection Regulation, the data subject has the right to object at any time to the processing of personal data concerning him or her if the personal data are processed for direct marketing purposes. According to paragraph 3 of the same Article, if the data subject objects to the processing of personal data for direct marketing purposes, they may no longer be processed for that purpose.</p><p> Article 25 (2) of the General Data Protection Regulation requires the controller to take appropriate technical and organizational measures to ensure that, by default, only personal data necessary for each specific purpose of the processing are processed. This obligation applies to the amounts of personal data collected, the extent of the processing, the retention period and the availability. These measures shall in particular ensure that, by default, personal data are not made available to an unlimited number of persons without the consent of the natural person.</p><h5 id="OT9"> Retention of patient records</h5><p> According to section 12 of the Act on the Status and Rights of Patients (785/1992; later the Patients Act), a healthcare professional pursuant to section 2 of the Health Care Professionals Act (559/1994) shall enter in patient documents the information necessary to ensure the organization, planning, implementation and monitoring of patient care. . The healthcare unit and the healthcare professional who is self-employed must keep the patient records for the time required for the organization and implementation of the patient's care, any claims for reimbursement related to the care and scientific research.</p><p> The preparation of patient documents, the more detailed content of the information to be recorded in them and the data retention periods are regulated in more detail by the Decree of the Ministry of Social Affairs and Health on Patient Documents (298/2009; later the Patient Document Decree). Section 10 of the Decree defines the basic information to be defined in patient records. The information to be retained pursuant to subsection 1 (1) of the said section is the patient's name, date of birth, personal identity number, place of residence and contact information. The data must be kept in accordance with section 23 of the Patient Documentation Decree for the period referred to in the annex to the said decree.</p><h4 id="OT10"> Legal issue</h4><p> The Data Protection Officer will assess and resolve the applicant's case in accordance with the above-mentioned General Data Protection Regulation and the Data Protection Act. The following legal issues need to be assessed</p><p style="margin-left:83.2pt"><!--[if !supportLists]--> 1. whether the controller has exercised the applicant's right of objection under Article 21 (2) of the General Data Protection Regulation in accordance with Article 21 (3); and</p><p style="margin-left:83.2pt"><!--[if !supportLists]--> 2.<!--[endif]--> whether the controller should be ordered to exercise the applicant's right of erasure under Article 17 (1) of the General Data Protection Regulation.</p><p> If the controller has not acted in accordance with the General Data Protection Regulation, the EDPS should assess whether the remedial powers under Article 58 (2) of the General Data Protection Regulation should be exercised.</p><h4 id="OT11"> Decision and justification of the EDPS</h4><h5 id="OT12"> Decision</h5><p> The controller has not exercised the applicant's right under Article 21 (2) of the General Data Protection Regulation to object to the processing of personal data for direct marketing in accordance with Article 21 (3).</p><p> The applicant's request for the deletion of personal data is rejected. The applicant shall not be entitled to have personal data deleted pursuant to Article 17 (3) (b).</p><h5 id="OT13"> Note</h5><p> The Data Protection Officer shall issue a remark to the controller in accordance with Article 58 (2) (b) of the General Data Protection Regulation concerning the controller's failure to comply with its obligations under Articles 12 (4), 21 (2) and 25 (2) of the General Data Protection Regulation.</p><h5 id="OT14"> Reasoning</h5><p> The applicant has asked the data controller to terminate the communication for the first time on March 7, 2018 and for the second time on November 19, 2018. The registrar has responded to both requests and stated the importance of the direct marketing ban. In addition, the registrar has informed the applicant in connection with both messages that the direct marketing was due to an error. However, after one year, 21.11.2019, the applicant has received direct marketing from the registrar.</p><p> The EDPS considers that the controller has not exercised the applicant's right under Article 21 (2) of the General Data Protection Regulation under Article 21 (3), as the applicant's personal data have been processed for direct marketing purposes despite the applicant's ban on direct marketing.</p><p> The controller has reported the error to the applicant, which has been corrected as soon as the error is detected. However, the EDPS notes that the request for deletion has been made three times by the applicant. Each time the registrar has responded to the applicant and stated that he has marked a ban on direct marketing. Despite this, the applicant has received direct marketing. The EDPS considers that the controller has not ensured that the applicant's right is exercised and that the applicant's personal data are processed in accordance with the General Data Protection Regulation. Thus, the EDPS considers that in the processing of personal data by the controller, the controller has not taken appropriate technical and organizational measures to ensure that it processes only the personal data necessary for the processing (Article 25 (2)).</p><p> The EDPS does not consider it necessary to impose other remedies on the controller in accordance with Article 58 (2) of the General Data Protection Regulation with regard to direct marketing. Although the applicant has received direct marketing, the controller has now stopped processing the applicant's personal data for direct marketing. The registrar has also said that he has changed his way of working so that the patient has the right to refuse to send eye examination invitations.</p><p> When submitting a ban on direct marketing, the applicant must 7.3. and 19.11.2018 submitted a request for deletion of data. The controller did not respond to the request for deletion, but only informed of the ban on direct marketing relevant to the applicant's data. For the third time on 22 November 2018, the applicant has requested that his data be deleted and requested a justification as to why his request has not been responded to.</p><p> The controller has refused to exercise the applicant's right of erasure under Article 17 due to the statutory retention obligation imposed on the controller. The registrar is an optician's movement which is required to draw up patient records and to keep them in accordance with Article 23 of the Patient Records Decree for at least the period referred to in the annex to that decree. The patient document must contain, among other things, the applicant's contact information (Section 10 (1) (1) of the Act). Under Article 17 (3) (b) of the General Data Protection Regulation, the data subject does not have this right to have the data deleted if the processing is necessary to comply with a legal obligation. The EDPS considers that the data subject is not entitled to have the data deleted in order to comply with a statutory obligation incumbent on the controller.</p><p> Although the controller has not been obliged to delete the applicant's personal data, the EDPS draws attention to the fact that only after the applicant's third request has the controller provided the applicant with information as to why the applicant's personal data are not deleted. According to Article 12 (4) of the General Data Protection Regulation, the controller shall provide the data subject without delay and at the latest within one month of receipt of the request with a reason for not complying with the applicant's request. Following the applicant's first two requests, the controller has not provided the applicant with the reasons why it has not exercised the right.</p><h4 id="OT15"> Applicable law</h4><p> EU General Data Protection Regulation (2016/679) Article 12 (4), Article 17 (3), Article 21 (2) and (3), Article 25 (2), Article 58 (2) (b)</p><p> Section 2 of the Health Care Professional Personnel Act (559/1994)</p><p> Section 12 of the Patient Status and Rights Act (785/1992)</p><p> Sections 9, 10 and 23 of the Decree of the Ministry of Social Affairs and Health on patient documents (298/2009)</p><h4 id="OT16"> Appeal</h4><p> According to section 25 of the Data Protection Act (1050/2018), this decision may be appealed to an administrative court in accordance with the provisions of the Act on Administrative Proceedings (808/2019).</p><p> <strong>The decision is not yet final.</strong></p></div><!-- cached 17:33:51 24.03.2021 --></div></div><div id="sidebar"><div class="description"><h3 class="title material"> <a href="/fi/viranomaiset/tsv/">Data Protection Officer</a></h3><p> Decisions of the Data Protection Supervisor on the interpretation of the Data Protection Regulation and the Personal Data Act.</p></div><div id="document-sidebar"><div class="extra-links"><h3 class="other title"> Other material related to the material</h3><ul><li> <a href="/data/tsv/TSV_tyojarjestys_FI.pdf" class="pdf"><span>›</span> Rules of procedure of the Office of the Data Protection Officer</a></li></ul></div></div><div id="toc-container"><div id="toc-title"><h4> Table of contents</h4><h3> 1/22/2021</h3></div><div id="toc-content"><div id="toc"> <a href="#">Adequate measures to implement taking care of the rights of the data subject</a> <a href="#OT1">Subject</a> <a href="#OT2">requirements Applicants reasoned</a> <a href="#OT3">statement from the applicant</a> <a href="#OT4">statement from the Registrar</a> <a href="#OT5">applicant's response to</a> <a href="#OT6">the choice of the applicable law</a> <a href="#OT7">Applicable legislation</a> <a href="#OT8">General Data Protection Regulation</a> <a href="#OT9">to store patient data</a> <a href="#OT10">Legal question</a> <a href="#OT11">the decision of the EDPS and the reasons for</a> <a href="#OT12">decision</a> <a href="#OT13">Note</a> <a href="#OT14">Grounds</a> <a href="#OT15">Applicable legal provisions</a> <a href="#OT16">for appeal</a></div></div><div id="toc-footer"> <a class="to-top" href="#document">To the beginning of the page</a></div></div></div></div><div id="breadcrumbs-bottom"><div class="container"> <span class="skip">You are here:</span> <a class="home" href="/fi/">Finlex</a> › <a href="/fi/viranomaiset/">Authorities</a> › <a href="/fi/viranomaiset/tsv/">Data Protection Officer</a> › <a href="../2021/" title="Data Protection Supervisor 2021">2021</a> › <span title="Data Protection Supervisor 22.1.2021">22.1.2021</span> </div></div><div id="sitemap"><div id="sitemap-content" class="container"><div id="sitemap-category-laki"><h5> <a href="/fi/laki/">Legislation</a></h5><ul><li> <a href="/fi/laki/ajantasa/">Up - to - date legislation</a></li><li> <a href="/fi/laki/alkup/">Acts in original</a></li><li> <a href="/fi/laki/kokoelma/">Electronic collection of legal acts</a></li><li> <a href="/fi/laki/smur/">Directory of legislative amendments</a></li><li> <a href="/fi/laki/kaannokset/">Translations of legal acts</a></li><li> <a href="/fi/laki/saame/">Acts in the Sámi language</a></li></ul></div><div id="sitemap-category-oikeus"><h5> <a href="/fi/oikeus/">Case law</a></h5><ul><li> <a href="/fi/oikeus/kko/">The Supreme Court</a></li><li> <a href="/fi/oikeus/kho/">The Supreme Administrative Court</a></li><li> <a href="/fi/oikeus/ho/">Rights of the Court</a></li><li> <a href="/fi/oikeus/hao/">Administrative rights</a></li><li> <a href="/fi/oikeus/mao/">Market law</a></li><li> <a href="/fi/oikeus/tt/">Industrial tribunal</a></li><li> <a href="/fi/oikeus/vako/">Insurance law</a></li><li> <a href="/fi/oikeus/eurooppa/">European courts</a></li><li> <a href="/fi/oikeus/foki/">Case law in the literature</a></li></ul></div><div id="sitemap-category-viranomaiset"><h5> <a href="/fi/viranomaiset/">Authorities</a></h5><ul><li> <a href="/fi/viranomaiset/normi/">Collections of regulations of public authorities</a></li><li> <a href="/fi/viranomaiset/tyoehto/">Collective agreements</a></li><li> <a href="/fi/viranomaiset/foka/">Chancellor of Justice of the Government</a></li><li> <a href="/fi/viranomaiset/ftie/">Data Protection Board</a></li><li> <a href="/fi/viranomaiset/tsv/">Data Protection Officer</a></li></ul></div><div id="sitemap-category-sopimukset"><h5> <a href="/fi/sopimukset/">Government contracts</a></h5><ul><li> <a href="/fi/sopimukset/sopsteksti/">Government contracts</a></li><li> <a href="/fi/sopimukset/sopsviite/">Government Contracts Reference Database</a></li><li> <a href="/fi/sopimukset/sopimussarja/">Electronic contract series</a></li><li><a href="/fi/sopimukset/verosopimusteksti/">
</a></li></ul></div><div id="sitemap-category-esitykset"><h5><a href="/fi/esitykset/">Government proposals</a></h5><ul><li> <a href="/fi/esitykset/he/">Government proposals</a></li></ul><h5> <a href="http://julkaisut.finlex.fi">Proceedings</a></h5><ul><li> <a href="http://lainvalmistelu.finlex.fi">Legislative Process Guide</a></li><li> <a href="http://helo.finlex.fi">Instructions for preparing Board proposals</a></li><li> <a href="http://lainkirjoittaja.finlex.fi">The Writer's Guide</a></li><li> <a href="http://yhdenvertaisuus.finlex.fi">Equality assessment</a></li><li> <a href="http://kuulemisopas.finlex.fi">Legislative Consultation Guide</a></li><li> <a href="http://kokeiluohje.finlex.fi">Trial Law Guide</a></li></ul></div><div id="sitemap-category-finlex"><h5> <a href="/fi/">Finlex®</a></h5><ul><li> <a href="/fi/uutiset/">News archive</a></li><li> <a href="/fi/rss/">RSS feeds</a></li><li> <a href="/fi/ohjeet/">Instructions</a></li><li> <a href="/fi/palaute/">Feedback</a></li><li> <a href="/fi/kayttoehdot/">Terms of use</a></li><li> <a href="/fi/saavutettavuusseloste/">Accessibility statement</a></li><li> <a href="/fi/sivukartta/">Sitemap</a></li></ul></div></div><div id="disclaimer"><p> Finlex ® is a public and free Internet service for legal material owned by the Ministry of Justice.<br /> Finlex content is produced and maintained by Edita Publishing Oy. Neither the Ministry of Justice nor Edita shall be liable for any errors that may occur in the content of the databases, direct or indirect damages caused to the user by their use, or interruptions in the use of the Internet data network or other disturbances.</p></div></div></body></html>
