The Data Protection Ombudsman's Office operates under the jurisdiction of the Ministry of Justice but functions independently in carrying out its duties and exercising its powers.
The ombudsman is responsible for handling and resolving data protection issues in accordance with applicable laws.
[1] The sanctions board, consisting of the ombudsman and two deputies, is responsible for imposing administrative fines for serious data protection violations under the GDPR.
[9] In Finland, all companies and authorities are required to provide individuals with access to their personal data upon request.
If an organization refuses to provide the requested data, it must state the legal grounds for its decision.