Data security and breach notification in Finland

(Source: Lexology) Finland has no general data security law. The data security requirements are set in various laws. The Personal Data Act sets forth general data security requirements. However, the security obligations are not specific and it is the data controllers’ responsibility to ensure that adequate measures are implemented.