Law note · Finland
GDPR Articles 82-83 and Data Protection Act Section 24, Enforcement in Finland
The Data Protection Ombudsman is Finland's supervisory authority. Section 24, read directly, assigns a General Data Protection Regulation (GDPR) Article 83 administrative fine to a collegial Sanctions Board chaired by the Ombudsman with at least two Deputy Ombudsmen and a three-member quorum, carries a ten-year limitation period from the infringement and a five-year limitation on enforcing an already-imposed fine, and bars a fine against central government authorities, municipal authorities, and several other named public bodies.
GDPR Article 82 gives any person who suffered material or non-material damage a right to compensation from the controller or processor, enforceable in the ordinary Finnish courts.
What it asks of an app
- Expect a Sanctions Board of the Data Protection Ombudsman and at least two Deputy Ombudsmen to decide any General Data Protection Regulation (GDPR) Article 83 administrative fine against your processing of personal data of a person in Finland, under Data Protection Act Section 24.
- Expect any person who suffered material or non-material damage from an infringement to have a direct right to claim compensation from you as controller or processor in the ordinary Finnish courts, under GDPR Article 82.
When LexLint raises it
Declared activities: crawls_web, trains_models, deploys_chatbot, high_risk_decisions, processes_biometrics, processes_voice
Primary source: Ministry of Justice, Finland, official English translation, Data Protection Act Section 24
Official Journal text, EUR-Lex, Regulation (EU) 2016/679