Govt to support Vastaamo data breach victims

The Ministry of Social Affairs and Health will ensure that the victims of the data breach at the psychotherapy centre Vastaamo continue to receive the necessary psychosocial and other support.

The decision was taken in a cabinet meeting on Wednesday, said a government press release on Thursday.

Support will continue to be provided through a number of different operators and channels for as long as is required.

The ministry will also monitor and coordinate the aftercare of the situation within the healthcare and social welfare services system.

Earlier, on 5 November, the government submitted a bill to parliament on the processing of client data in healthcare and social welfare. The Act is due to enter into force on 1 April 2021.

The proposed amendment would extend the obligation of all service providers that use client or patient information systems to join the Kanta service platform.

The information systems used by service providers must pass a test ensuring their operability with the Kanta services and a data security assessment carried out by an appointed data security assessment body.

The government will ensure the effective implementation of the Act through a variety of measures, including allocating additional resources to the National Supervisory Authority for Welfare and Health (Valvira) and the Finnish Institute for Health and Welfare. These increases in resources aim to improve guidance and supervision concerning the use of data management systems.

The government is therefore preparing a legislative amendment that, in limited situations such as data breaches, would provide an opportunity for individuals to change their personal identity code in order to limit the misuse of their identity.