Enforcing jurisdiction
Finland · Geography does not establish applicable law.
Confirmed applicable legislation
Privacy topics

Posti Jakelu Oy – €2,400,000 Fine (Finland, 2024)

€2,400,000DPA Tietosuojavaltuutetu13 November 2024Finland
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

Posti Jakelu Oy was fined for automatically creating electronic mailboxes for customers without their consent. The authority found that this practice violated GDPR rules. This ruling highlights the importance of obtaining explicit consent for services.

What happened

Posti Jakelu Oy set up electronic mailboxes for customers without their explicit consent.

Who was affected

Customers of Posti Jakelu Oy who were affected by the automatic mailbox setup.

What the authority found

The authority ruled that Posti Jakelu Oy violated GDPR by not obtaining consent for the creation of electronic mailboxes.

Why this matters

This case serves as a reminder that companies must ensure customers have control over the services they receive. It reinforces the need for clear consent practices in customer interactions.

Recorded legal citations
Automatically processed
Art. 5(1)(a) GDPR
Art. 6(1)(b) GDPR
Art. 12(1) GDPR
Art. 13(1)(c) GDPR
Art. 25(1) GDPR
View original scraped data
Art. 5(1)(a) GDPR
Art. 6(1)(b) GDPR
Art. 12(1) GDPR
Art. 13(1)(c) GDPR
Art. 25(1) GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Automated check recorded — 10 March 2026.

Processing notes: scope corrected.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The Finnish DPA imposed a fine of EUR 2.4 million on Posti Jakelu Oy following an investigation. It was found that Posti had automatically set up an electronic mailbox for customers without their explicit consent. This mailbox was connected to other services, and customers were unable to choose whether to use it, as the services were bundled together in a single contract. Canceling the mailbox would also have resulted in the termination of the other services. The DPA determined that the requested service could have been offered without the automatic creation of the electronic mailbox. Furthermore, Posti failed to properly inform customers about the activation of the mailbox.

Related Enforcement Actions (0)

No other enforcement actions found for Posti Jakelu Oy in FI

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

13 November 2024

Authority

DPA Tietosuojavaltuutetu

Fine Amount

€2,400,000

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Posti Jakelu Oy - Finland (2024). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: