Instructions for victims of data leaks on managing personal data

Publication date 31.1.2025 14.20 | Published in English on 3.2.2025 at 15.17 | Modified on 4.2.2025 at 12.50
Type:Press release

We recommend that you read the data leak guide in the Suomi.fi service if you are the subject of a data leak. The guide serves in particular adults whose personal data has leaked. In the Suomi.fi service, you can block a notification of move and prohibit the disclosure of personal data.

Read the data leak guide at Suomi.fiLänk till en annan webbplatsyja-external-link-opens-in-a-new-tab

A notification of move cannot be submitted on your behalf online only on the basis of your personal identity code 

If your personal identity code has ended up in the wrong hands, no one can submit a false change of address notification electronically just by knowing your personal identity code. An electronic notification of move is submitted by logging in to the Posti and the Digital and Population Data Services Agency’s service with a mobile certificate or online banking codes.

A notification of move on behalf of another person using a paper form will require a power of attorney from the mover.

You cannot submit a notification of move by telephone.

Block on notification of move

The Block a notification of move service prevents someone from submitting a false change of address for you. We will record the block in the Population Information System. When you later want to submit a notification of move, you must first cancel the Block a notification of move service.

A person aged 15 or over can block a notification of move on their own behalf in the Suomi.fi service, if they have the means for strong identification in the service, such as online banking codes or a mobile certificate. A block on a notification of move submitted in the Suomi.fi service takes effect immediately. A person aged 15 or over may also block a notification of move on site at the Digital and Population Data Services Agency, in which case the block will enter into force with a delay. A person aged 15 or over can also cancel the Block on a notification of move service.

You cannot submit a block on notification of move by telephone. If necessary, you can ask family or friends to help you activate the block in the web service. Numerous libraries and organisations also offer digital support services.

Read more about how to block a notification of move 

Non-disclosure of personal data 

A non-disclosure of personal data can be submitted in the Population Information System This will prevent the disclosure of your data from the Population Information System. There are prohibitions of different scopes and you can manage these in the Suomi.fi service once you have identified yourself in the service. You can manage your own non-disclosure of personal data in the Suomi.fi service if you have the tools required for identification, such as a mobile certificate or online banking codes.

You can also prohibit the disclosure of the data by notifying the Digital and Population Data Services Agency by telephone, using a form or by sending a free-form letter. 
You can contact the Population Information Service by phone at +358 295 536 220 (weekdays from 9 am to 3 pm). A non-disclosure of personal data notification cannot be submitted by telephone on behalf of another person.

If you do so using a form or letter, you can return this to us online as a classified email or in paper form to any Digital and Population Data Services Agency service location. You can send a classified email at https://turvaviesti.dvv.fiLänk till en annan webbplatsyja-external-link-opens-in-a-new-tab: select Population Information as the recipient. See the visiting and postal addresses of service locations Service location page

Read more on prohibiting the disclosure of information  

A personal identity code cannot be changed pre-emptively

It is not possible to change a personal identity code pre-emptively i.e. to prevent possible abuses or violations of rights.

In cases of abuses, a personal identity code can be changed if the conditions for doing so are met.

Read more about changing your personal identity code on the dvv.fi website.

Being affected by a data breach is not a basis for a non-disclosure for personal safety

A non-disclosure for personal safety is an exceptional measure that restricts the release of address information from the Population Information System. It can only be granted if you have a justified and obvious reason to believe that your or your family's health or safety is at risk. Such threats may arise, for example, in cases of domestic violence or if you work in a profession where you face a serious threat of physical violence.

Being affected by a data breach alone does not meet the requirements for granting a non-disclosure for personal safety. Therefore, please do not apply for it solely as a precautionary measure.

By setting a restriction on disclosure of information, you can already effectively limit the release of your address details from the Population Information System.

More information on a non-disclosure for personal safety reasons

See also: Instructions on managing population data for guardians of children whose personal data has been leaked 

Update 3 Feb 2025: an additional chapter about a non-disclosure for personal safety