A recent report conducted by researchers from the University of Eastern Finland for the Ministry of Social Affairs and Health has uncovered serious legal shortcomings in the management of Finnish health data. Professors Tomi Voutilainen and Evgeniya Kurvinen examined whether the handling of health information by welfare areas and other key stakeholders adheres to legal standards. Their findings indicated that the Finnish Institute for Health and Welfare operates more than ten health data registers lacking the constitutional regulatory framework required by law.

Among the identified registers with dubious legal standing are those related to vaccination, emergency services, fertility treatments, abortion, sterilization, and cancer registrations. The researchers pointed out that both primary care and specialized healthcare notification registers do not have a lawful basis in Finland. Notably, the Deputy-Ombudsman had previously raised concerns with the Ministry of Social Affairs and Health about this issue as early as 2014, highlighting the persistence of this legal ambiguity.

Professor Voutilainen emphasized the urgent need for clear and precise legal regulations regarding the retention of healthcare data, including the justification for data collection and the duration for which patient information can be stored. This supports the necessity for legislative action to rectify the current gaps in the legal framework governing health data management in Finland, ensuring patient data is handled securely and lawfully.