Finland. Comprehensive data protection. Act

HenkilötietolakiPersonal Data Act (Henkilötietolaki 523/1999)

Repealed/superseded
Partly verifiedMedium confidence. Enactment day not confirmed, so only the year is given. Repeal date taken from the entry into force of Tietosuojalaki as recorded in the existing fi-dpa-2018 row and a government bill summary. Role of the Ombudsman is as supervisor of codes of conduct under the Act as seen in search results.

§1Summary

Synopsis

Finland's implementation of Directive 95/46/EC and its general data protection law from 1999 to 2018. It replaced the Personal Data File Act 471/1987. A 2018 government bill proposed its repeal, and the Tietosuojalaki 1050/2018 took effect on 1 January 2019.

Key themes
  • implementation of Directive 95/46/EC
  • processing of personal data
Unique features

Applied to all personal data processing in Finland.

SaaS relevance

Historical only; replaced by the GDPR and the Tietosuojalaki (see fi-dpa-2018).

§2Obligations

Breach notification
None
DPO
No

§3Dates

Key dates
  • Adopted
  • In force
  • Ended
  • Act 523/1999; in force 1 June 1999; implemented Directive 95/46/EC; repealed with effect from 1 January 2019 when the Tietosuojalaki 1050/2018 took effect

§4Text and authority

Text
Authority
Data Protection Ombudsman (tietosuojavaltuutettu)

§5Where it applies

Domestic law of
Finland

§6Sources and verification

Sources consulted
Verification

Medium confidence.

Partly verifiedMedium confidence. Enactment day not confirmed, so only the year is given. Repeal date taken from the entry into force of Tietosuojalaki as recorded in the existing fi-dpa-2018 row and a government bill summary. Role of the Ombudsman is as supervisor of codes of conduct under the Act as seen in search results.