Support Centre

Finland: Deputy Ombudsman fines Kymen Vesi Oy €16,000 for GDPR violations

The Office of the Data Protection Ombudsman ('the Ombudsman') announced, on 22 May 2020, that the Deputy Data Protection Ombudsman ('the Deputy Ombudsman'), had issued a decision ('the Decision') in which it fined Kymen Vesi Oy €16,000 for failing to undertake a Data Protection Impact Assessment ('DPIA') . In particular, the Decision relates to Kymen Vesi's processing of the location data of its employees by tracking vehicles with a vehicle information system without completing a DPIA before such processing had taken place.  

You can read the press release here and the Decision, only available in Finnish, here.  

Update (29 May 2020)  

EDPB issues statement on Deputy Ombudsman Kymen Vesi fine 

The European Data Protection Board ('EDPB') issued, on 27 May 2020, a statement ('the Statement') on the Deputy Ombudsman's decision to fine Kymen Vesi. 

You can read the Statement here