Tietosuojalaki (1050/2018) — Data Protection Act
Tietosuojalaki (1050/2018) — Data Protection Act
Tietosuojalaki (1050/2018) — Data Protection Act — 100% covered.
3 requirements · 3 enforced · 0 designed · 0 advisory · 0 deferred.
Source: Tietosuojalaki (1050/2018) — Data Protection Act. National statute implementing/supplementing Regulation (EU) 2016/679 (GDPR) in Finland. Substantive obligations resolve to the deep GDPR per-article registry (internal) reused via the framework__jurisdiction edge; this registry maps only the Finland-specific national deltas.
By category
| Category | Reqs | Enforced | Designed | Advisory | Deferred | Coverage |
|---|---|---|---|---|---|---|
| GDPR transposition (national basis) | 1 | 1 | 0 | 0 | 0 | 100% |
| Supervisory authority + accountability | 1 | 1 | 0 | 0 | 0 | 100% |
| Breach notification (national channel) | 1 | 1 | 0 | 0 | 0 | 100% |
Every requirement → the KYE™ artefact that enforces it
| ID | Title | Status | KYE™ enforcement |
|---|---|---|---|
fi-tietosuojalaki.gdpr-transposition |
Tietosuojalaki (1050/2018) — Data Protection Act transposes / supplements the GDPR (Reg. (EU) 2016/679) into Finland national law — the substantive data-protection obligations resolve to the GDPR per-article bijection | enforced | audit_events: kye.purpose.admissibility.v1, kye.evidence.decision_map.v1engines: internal, internalconstitution_refs: constitution/12-PURPOSE-PERMISSION.md, constitution/21-DELEGATED-AUDITABILITY.md |
fi-tietosuojalaki.supervisory-authority |
Cooperation with the national supervisory authority (the Tietosuojavaltuutettu (Data Protection Ombudsman)) — records of processing and the demonstrable-accountability account an AI agent's data processing must produce on request | enforced | audit_events: kye.evidence.pack.v1, kye.compliance.attestation.v1engines: internal, internalconstitution_refs: constitution/21-DELEGATED-AUDITABILITY.md, constitution/31-DATA-GOVERNANCE-PACK.md |
fi-tietosuojalaki.breach-notification |
Personal-data breach notification to the Tietosuojavaltuutettu (Data Protection Ombudsman) (and affected individuals) within the GDPR Art. 33/34 window, on the national reporting channel | enforced | audit_events: kye.signal.incident.opened.v1, kye.compliance.attestation.v1engines: internal, internalconstitution_refs: constitution/13-RESILIENCE-LOOP.md |