Law: The Data Protection Act (1050/2018) ('the Data Protection Act') and the General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR')
Regulator: Office of the Data Protection Ombudsman ('the Ombudsman')
Summary: In Finland, the GDPR is supplemented by the Data Protection Act which entered into force on 1 January 2019 and repealed the old Personal Data Act (523/1999). In addition, the GDPR has led to amendments to other legislation regarding the processing of personal data such as the Act on the Protection of Privacy in Working Life (759/2004) as amended in 2019, the Criminal Code (39/1889) ('the Criminal Code'), the Act on Enforcement of Fines (672/2002) (only available in Finnish here), and the Act on Grey Economy Information Unit (1207/2010) (only available in Finnish here). The Ombudsman acts as the Finnish supervisory authority with regards to the GDPR and its supplementing legislation.