LAW
A member of the European Union, Finland implemented the EU Data
Protection Directive 95/46/EC in June 1999 with the Personal Data
Act 523/1999 ("Act").
DEFINITION OF PERSONAL DATA
Pursuant to the Act, "personal data" means any
information on a private individual and any information on his or
her personal characteristics or personal circumstances where these
are identifiable as concerning him or her or the members of his or
her family or household.
DEFINITION OF SENSITIVE PERSONAL DATA
Pursuant to the Act, "sensitive personal data" means
personal data that relates to or is intended to relate to (a) race
or ethnic origin; (b) the social, political or religious
affiliation or trade union membership of a person; (c) criminal
act, punishment or other criminal sanction; (d) the state of
health, illness or handicap of a person or the treatment or other
comparable measures directed at the person; (e) the sexual
preferences or sex life of a person; or (f) the
