Statistics Act, Collection Without Identifiers and Release of Identifiable Statistical Data (Sections 5, 13 and 13 a)
Tilastolaki 280/2004, 5, 13 and 13 a §
In force since .
A de-identification rule binding government bodies.
- Obligation class
- Prohibition, Governance
- Audit expectation
- none
What it requires
- If you are a state authority producing statistics, collect and store data without identifiers whenever that is possible for producing the statistics, and collect and store identifiers only where needed to combine data sets or otherwise to produce reliable and comparable statistics on societal trends (section 5).
- If you are a statistical authority, do not release data from which a statistical unit can be identified directly for scientific research or statistical analysis of societal conditions (section 13, paragraph 3).
- If you are a statistical authority releasing files for public use under section 13 a that were made from data collected for statistical purposes, remove the identifiers and process the files so that no statistical unit can be identified directly or indirectly (section 13 a).
These lines are LexLint's reading of the law's text.
If you get it wrong
Criminal exposureYes
Criminal exposure note
Section 24 provides that a person who breaks the obligations in section 13 is sentenced to a fine for a statistical secrecy violation (tilastosalaisuusrikkomus), and that breach of the secrecy, non-disclosure and use-prohibition duties in sections 12 and 13 is punished under Criminal Code chapter 38 section 1 or 2, unless the act is punishable under Criminal Code chapter 40 section 5 or another law sets a harsher penalty.
What record it asks for
Logging duty
Sections 5, 13 and 13 a limit the collection of identifiers and the release of identifiable statistical data. They state no duty to create, keep or produce a log or record of collection or release.
- Kind
- None
- As of
What this law does
Section 5 provides that data for statistics are to be collected and stored without identifiers whenever that is possible for producing the statistics. Section 5 allows identifiers to be collected and stored only where that is necessary for combining data sets or otherwise necessary for producing reliable and comparable statistics on societal trends.
Section 13 bars a statistical authority from releasing data from which a statistical unit can be identified directly in the research and statistical-analysis situations of paragraph 2, point 1. Section 13 lets a statistical authority give access, in those situations, to confidential data from which a statistical unit can be identified only indirectly.
Section 13 a lets a statistical authority release for public use files made from data collected for statistical purposes from which the identifiers have been removed and which have been processed so that a statistical unit cannot be identified directly or indirectly. Section 24 punishes a breach of the obligations in section 13 with a fine for a statistical secrecy violation.
When LexLint raises it
When your app profile says your app processes personal data or processes de-identified data.
Back to the example · Lint your app
Page updated .