Continue reading on DataGuidance with:
Free Member
Limited ArticlesCreate an account to continue accessing select articles, resources, and guidance notes.
Already have an account? Log in
Finland: Ombudsman publishes guidance on data breach notification obligations
On November 8, 2023, the Office of the Data Protection Ombudsman (the Ombudsman) announced that it had published guidance on data breach notification obligations on its website. In particular, the Ombudsman noted that the guidance was drafted based on feedback from organizations and that about half of the matters brought to it are notifications of data security breaches of personal data. In this regard, the Ombudsman highlighted that, in 2022, it was notified of 5,445 personal data breaches. Notably, the Ombudsman remarked that the assessment of the seriousness of any data breach's effects must consider the consequences for the data subject, not the data controller.
You can read the press release here and the guidance here, both only available in Finnish.