The Finnish authority issues a reprimand to the Legal Aid and Guardianship Services Agency for unjustified credit data checks on civil servants
The Finnish Data Protection Ombudsman's Office issued a warning against the Legal Aid and Guardianship Services Agency for processing the credit data of its employees without a legal basis.
The agency had checked the credit data of 70 then 600 civil servants between 2024 and 2025. It identified this breach itself during a self-audit in November 2025, which led to a personal data breach notification. The Ombudsman's Office found that the agency's internal procedures to ensure the lawfulness of processing, as provided by the Act on the Protection of Privacy at Work, were deficient. Corrective measures were taken by the agency, including the destruction of the data concerned. The limitation of access to the data and the absence of disclosure to third parties were considered mitigating factors. Decision TSV/13090/2025 is not yet final.
The agency had checked the credit data of 70 then 600 civil servants between 2024 and 2025. It identified this breach itself during a self-audit in November 2025, which led to a personal data breach notification. The Ombudsman's Office found that the agency's internal procedures to ensure the lawfulness of processing, as provided by the Act on the Protection of Privacy at Work, were deficient. Corrective measures were taken by the agency, including the destruction of the data concerned. The limitation of access to the data and the absence of disclosure to third parties were considered mitigating factors. Decision TSV/13090/2025 is not yet final.
Informations complémentaires
L’analyse complète est réservée aux membres
Montant de la sanction, thèmes, secteurs, entités et données concernées : l’essai gratuit de 14 jours ouvre la fiche entière et la veille personnalisée.
Essayer gratuitement 14 jours · accès complet · sans carte bancaire