🇫🇮

Tietosuojavaltuutetun toimisto

Data protection authority of Finland

Official website

Total Actions

23

Total Fines

€6.9M

Average Fine

€302K

Among actions with fines

Enforcement Factor

1.30

Measured

About Tietosuojavaltuutetun toimisto

The Tietosuojavaltuutetun toimisto is Finland's data protection authority responsible for enforcing GDPR and data-protection compliance. Tietosuojavaltuutetun toimisto has taken 23 enforcement actions resulting in €6,948,400 in total penalties, with an average fine of €302K per sanctioned entity. The authority maintains a balanced enforcement approach (enforcement factor: 1.3), combining deterrent fines with corrective orders. Its most significant action was a €1,800,000 fine against S-Pankki Oyj in 2025. The most frequently cited legal basis in Tietosuojavaltuutetun toimisto's decisions is (2) GDPR and Art. 5(1) f) GDPR.

Enforcement by Year

YearActionsTotal Fines
20205€208K
20217€780K
20223€360K
20232€25K
20242€1.8M
20253€3.8M
20261€5K

Most Cited GDPR Articles

Art. 5(1)(f) GDPR
5
Art. 5(1)(a) GDPR
4
Art. 25(1) GDPR
4
Art. 32(1) GDPR
4
Art. 25(2) GDPR
3
Art. 12(3) GDPR
3
Art. 15(1) GDPR
3

Frequently Asked Questions

How many GDPR and data-protection actions has Tietosuojavaltuutetun toimisto issued?

Tietosuojavaltuutetun toimisto has issued 23 enforcement actions related to GDPR and data-protection, totaling €6.9M.

What is Tietosuojavaltuutetun toimisto's largest GDPR and data-protection fine?

The largest was a €1.8M fine against S-Pankki Oyj on 2025-09-08.

Explore More

All Finland Enforcement

Country overview and DPA list

All Countries

Browse enforcement across Europe

Risk Calculator

Estimate your compliance risk