GDPR Overview

The GDPR is supplemented by a new “Data Protection Act” (Tietosuojalaki (1050/2018)) in Finland. The new Data Protection Act repealed the old Personal Data Act (523/1999).

The Government has submitted a proposal for necessary amendments to other national legislation providing for processing of personal data as required by the GDPR, including to the Act on the Protection of Privacy in Working Life (759/2004). The amendments to the Act on the Protection of Privacy in Working Life (759/2004) came into force in 1 April 2019. The amendments (N° 347/2019 amending Sections 2, 4, 5, 16, 17, 22 and 24) concern, i.a, the storage of the employee’s data concerning health (Section 5 (4)), and the general preconditions for collecting personal data concerning employees and the employer’s duty to provide information (Section 4). The English version including amendments up to 347/2019 is avalaible here: https://www.finlex.fi/fi/laki/kaannokset/2004/en20040759.pdf

The GDPR applies from 25th May 2018.

The Data Protection Act applies from 1 January 2019.