Enforcing jurisdiction
Finland · Geography does not establish applicable law.
Confirmed applicable legislation
Privacy topics

Company – €1,600 Fine (Finland, 2023)

€1,600Tietosuojavaltuutetun toimisto4 September 2023Finland
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

A Finnish psychotherapy company was fined for not explaining why it couldn't provide a customer access to their personal data. The company failed to communicate the reasons for withholding records, which is important for transparency. This case shows that businesses must be clear with customers about their data rights.

What happened

The company did not inform a customer why their request for access to personal data was denied.

Who was affected

A customer who requested access to their stored personal data from the psychotherapy company.

What the authority found

The authority found that the company violated GDPR by not providing adequate information regarding the denial of access to personal data.

Why this matters

This case serves as a reminder for businesses to be transparent and responsive to customer data requests. Clear communication about data rights is essential for compliance.

Recorded legal citations
Automatically processed
Art. 15 GDPR
Art. 12(3) GDPR
View original scraped data
Art. 12(3) GDPR
Art. 15(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Review needed — 16 March 2026.

Processing notes: date discrepancy.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The Finnish DPA has imposed a fine of EUR 1,600 on a company providing psychotherapy services. A customer had submitted a request for access to their stored personal data. However, the company had not informed the customer of the reason why the records of the psychotherapy sessions could not be provided.

Related Enforcement Actions (0)

No other enforcement actions found for Company in FI

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

4 September 2023

Authority

Tietosuojavaltuutetun toimisto

Fine Amount

€1,600

Enforcement Tracker ID

ETid-2052

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Company - Finland (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: