Back to Cases
technologypublic_sector · 2023
Kela
The Ombudsman sanctioned Finland's social insurance institution over insufficient access restrictions to sensitive benefits data, citing GDPR Articles 5, 24 and 32.
Fine Imposed€140,000.0
Authority
Office of the Data Protection Ombudsman
Stylebalanced
Avg. investigation15 mo
Regulation
Key Takeaways
- Public-benefits systems require strict segregation of duties for sensitive citizen data.