DPA Tietosuojavaltuutetu
Data protection authority of Finland
Total Actions
52
Total Fines
€8.4M
Average Fine
€600K
Among actions with fines
Enforcement Factor
1.50
Moderately active
About DPA Tietosuojavaltuutetu
The DPA Tietosuojavaltuutetu is Finland's data protection authority and an active enforcer of GDPR and ePrivacy requirements. DPA Tietosuojavaltuutetu has taken 52 enforcement actions resulting in €8,395,000 in total penalties, with an average fine of €600K per sanctioned entity. The authority maintains a balanced enforcement approach (enforcement factor: 1.5), combining deterrent fines with corrective orders. Its most significant action was a €2,400,000 fine against Posti Jakelu Oy in 2024. Key enforcement areas include cookies placed before consent, third-party cookies without consent, unclear cookie information. The most frequently cited legal basis in DPA Tietosuojavaltuutetu's decisions is Art. 5(1)(a) GDPR and Art. 25(1) GDPR.
Largest Fines by DPA Tietosuojavaltuutetu
View all actionsRecent Actions by DPA Tietosuojavaltuutetu
View all actionsEnforcement by Year
| Year | Actions | Total Fines |
|---|---|---|
| 2020 | 2 | €72K |
| 2021 | 12 | €690K |
| 2022 | 16 | €1.2M |
| 2023 | 10 | €440K |
| 2024 | 8 | €4.2M |
| 2025 | 1 | €1.8M |
| 2026 | 3 | €0 |
Most Enforced Violations
Frequently Asked Questions
How many GDPR and ePrivacy actions has DPA Tietosuojavaltuutetu issued?
DPA Tietosuojavaltuutetu has issued 52 enforcement actions related to GDPR and ePrivacy, totaling €8.4M.
What is DPA Tietosuojavaltuutetu's largest GDPR and ePrivacy fine?
The largest was a €2.4M fine against Posti Jakelu Oy on 2024-11-13.
What violations does DPA Tietosuojavaltuutetu enforce most?
The most commonly enforced violations by DPA Tietosuojavaltuutetu are cookies placed before consent, third-party cookies without consent, unclear cookie information.