THE FINNISH DPA IMPOSES FINE ON TAKSI HELSINKI OY FOR VIOLATION OF DATA PROTECTION LEGISLATION

08.06.2020

In November 2019, the Office of the Data Protection Ombudsman (“Authority” or “DPA”) launched an investigation on Taksi Helsinki’s personal data processing. Upon the investigation, the Authority found serious deficiencies in the company’s processing of personal data.

First of all, the company had not assessed the risks and effects of personal data processing before adopting a camera surveillance system that records audio and video in its taxis. Moreover, Taksi Helsinki failed to conduct the impact assessments required for security camera surveillance and location data processing, by the GDPR before the start of processing.

At the investigation, it is also revealed that Taksi Helsinki did not inform data subjects of the processing of their personal data in the manner required by data protection legislation. 

In this context, the Office of the Data Protection Ombudsman imposed an administrative fine of €72.000 on it and ordered Taksi Helsinki to conduct a balance test to evaluate and to carry out the required impact assessments.

You can read the full decision (in Finnish) here.

Should you have any queries and/or remarks, please do not hesitate to contact us. 

Kind regards,

Zumbul Attorneys-at-Law

info@zumbul.av.tr