Rikosrekisterilaki

Rikosrekisterilaki, or the Criminal Records Act, is a Finnish statute that governs the processing of information in the country’s criminal records. It defines what data may be recorded, how it may be used, who may access it, and how long it is retained. The act is designed to balance public safety and the integrity of individuals’ privacy, setting clear rules for the handling of criminal record information.

The act applies to authorities and to private parties when there is a legitimate legal basis for access. It regulates disclosures to employers, licensing bodies, and other entities, and it generally restricts access to information to those with a specific, lawful purpose. Individuals can typically obtain information about their own records and may request corrections if the data is inaccurate.

Data contained in the criminal records may include information about convictions and related dispositions, as well as other measures or decisions that the law regards as recordable. Access to this information is limited and requires consent or a statutory basis, and data processing must comply with applicable data protection principles and safeguards.

Retention and destruction rules determine how long records are kept and when data must be deleted. The act works in conjunction with broader data protection laws, such as the European Union’s General Data Protection Regulation and Finnish data protection legislation, to ensure accuracy, data minimization, and individuals’ rights to access and rectify their information.