Tietosuojavaltuutetun toimisto (Finland) · 13 December 2022
City of Helsinki
About: Accountability, Data principles, Data security, International transfers, Transparency
FineNo fineViolation found
- Regulator
- Tietosuojavaltuutetun toimisto (Finland)
- Decided
- 13 December 2022
- Country
- Finland
- Sector
- Not given
- Regulator’s reference
- 4672/161/2022
- Fino case number
- 2022/FI/026
What happened
The Finnish DPA held that four cities in Finland had, among others, unlawfully transferred personal data to the US when using Google Analytics and Google Tag Manager on their public library online services. The DPA ordered them to delete the data collected through these tools.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(1)(a)Read →
- Art. 13Information to be provided where personal data are collected from the data subject13(2)Read →
- Art. 25Data protection by design and by default25(1)Read →
- Art. 32Security of processingRead →
- Art. 44General principle for transfersRead →
- Art. 46Transfers subject to appropriate safeguardsRead →
- Accountability
- Data principles
- Data security
- International transfers
- Transparency
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2022/FI/026.