Cybersecurity Policy Report, Finnish DPA Releases 2024 Inspection Plan, (Apr 2, 2024)

By Tony Foley

A 2024 inspection plan released today by the Finnish Office of the Data Protection Ombudsman is largely focused on monitoring the processing of personal data in organizations and the management of data subject access rights.

In a news release announcing the plan, the ombudsman said it planned to conduct 10 inspections in total. Some of the inspections will be aimed at the processing of personal data where the person’s right to inspection (and corresponding supervision) is limited, particular in the security sector. Accordingly, the ombudsman will check the account information of Finnish Customs and the security information systems of the Finnish Defense Forces, as well as the processing of personal information related to intelligence in the Protection Police.

Among other areas to be inspected by the ombudsman are user management and access control in the processing of personal data by the immigration administration, storage of personal data in parking enforcement, and observation of atypical processing through log monitoring in the health care patient information system. The ombudsman also said it would conduct ad hoc inspections, as necessary, in situations that arose during the year or to respond to individual complaints.

The text of the inspection plan may be accessed from the news release, but is available only in Finnish.

News: InternationalLegislation LitigationEnforcement DataSecurity DataPrivacy