The General Data Protection Regulation (GDPR) of the EU entered into force on 25 May 2018. The new national Data Protection Act entered into force on January 1, 2019 to supplement and clarify the General Data Protection Regulation (GDPR) of the EU. Due to the precedence principle of the EU law, national legislation in contradiction to the General Data Protection Regulation shall not be applied.

Many principles will remain unchanged, but the GDPR will also introduce new obligations regarding data protection and the handling of personal data that will have to be anticipated.

The Migration Institute of Finland is responsible for personal data and we will handle the data in accordance with the GDPR. This means that

  • personal data will be collected only for
    a specific, exact and legal purpose
  • only a sufficient volume will be
    collected in view of the purpose of the personal data handling
  • data will be handled according to law,
    appropriately, confidentially and safely
  • data will be updated, if necessary, and
    incorrect data will be corrected
  • you will be entitled to know what
    personal data the institute handles that concerns you. At your discretion, you
    can request the correction or deletion of your personal data.


    Report a data breach to the Migration Institute


    You can report a data breach or suspected breach with a low threshold. We investigate all reports we receive.

    Based on your report, we will investigate the existence of a data breach and take the necessary measures.

    We ask that you report the breach primarily via our secure email address:
    https://secmail.com/content/en/240/7753477/225444/225444.html

    Email recipient: tietosuojavastaava@migrationinstitute.fi

    What is a data breach and what to do if you have been the victim of a data breach involving your personal data:
    https://tietosuoja.fi/en/have-you-been-affected-by-a-personal-data-breach