Data Protection Ombudsman reprimands Digital and Population Data Services Agency

The Digital and Population Data Services Agency (DPDSA) has been reprimanded by the Data Protection Ombudsman on 16 October 2025 regarding an implementation document of Suomi.fi Messages.

The reprimanded action took place in 2022. According to the decision, the DPDSA should have prepared a specifying data protection document entitled ‘transfer impact assessment’, or TIA.

Absence of the document did not have practical impact on the processing of personal data. Data of Suomi.fi Messages users has not been transferred outside the EU/EEA. The data has been stored securely.

After 2023, the TIA document has no longer been a requirement between the EU and the United States, as EU-level arrangements have restored clear practices for the transfer of data.

“We take this reprimand seriously and have already amended our documentation,” says Noora Kallio, Deputy Director General of the Digital and Population Data Services Agency.

For additional information, please contact the Deputy Director General of the Digital and Population Data Services Agency at tel. +358 295 535 079 or [email protected].