Data protection and handling of personal data at Kela
Kela exercises due care in all its operations and ensures a high level of data protection and data security. The handling of personal data is based on the fulfilment of Kela’s statutory responsibilities.
At Kela, personal data are used when implementing statutory social insurance in customer service and the processing of claims for benefit. The data related to benefit processing constitute a benefit register. Kela also has other personal data registers.
Where can Kela receive information about its customers?
Kela receives data from the customers themselves (e.g. data related to claims for benefit and job applications). Based on law, Kela also receives data from different public authorities.
The purposes for which customer information is used
Kela uses the personal data when carrying out its statutory responsibilities.
- Kela uses personal data in a variety of contexts related to the granting and disbursement of benefits and to the delivery of customer service.
- Kela can also use data provided by a customer for the determination of another benefit if this is possible under law.
- The data can also be used when planning Kela’s operations and for the purposes of research and statistics.
Kela also handles personal data in connection with other operations, such as recruitment, procurement, administrative matters, feedback and newsletter subscriptions.
Release of customer information to third parties
In certain cases laid down by law, Kela provides information to for instance the Finnish Tax Administration, authorised pension providers and other insurance providers, social and healthcare authorities, the police and the debt enforcement authorities, and also as material for research purposes. In certain cases, Kela can also provide information to other parties with the customer’s consent.
Kela uses online direction services to calculate the distances of the trips on which the benefits are based.
Persons authorised to handle customer information
At Kela, personal data are only handled by personnel with authorisation to handle such data on the basis of their job duties and with authorisation to process the case in question. Kela supervises the handling of personal data.
Those who handle personal data sign a confidentiality agreement and commit to non-disclosure as regards confidential information. Such information includes all personal data.
The confidentiality obligation remains in force also in off-duty hours and after resignation from Kela service.
Kela has a right based on legislation to make individual automated benefit decisions. This will speed up the processing of the case.
Automated decisions are made on the basis of the same information and on the same grounds as other decisions. They are subject to the same review and appeals procedures as other decisions.
Your rights in relation to the handling of personal data
You have the right to check what information about you has been stored in Kela's registers. When needed, you can receive an extract of your personal data. The request to check personal data and the reply are usually free of charge.
You will receive the information you need within one month. If the information cannot be sent to you within the time limit specified and there is a valid reason for this, Kela can extend the time limit by a maximum of two months.
If you think that your personal data have been handled inappropriately at Kela, you can request that the matter be investigated.
You can also request a rectification of your personal data or deletion of incorrect data. Kela fulfils your request if there is a valid reason for the request. Kela will inform you if it is not possible under law to fulfil the request. If you are not satisfied with the decision, you can lodge a complaint with the Data Protection Ombudsman.
Please note that the right to request a rectification of data is not the same as a review of a benefit decision issued by Kela.
How to file a request
You can send a request concerning your personal data to Kela’s Registry.
The request can be sent to the Registry by post or by e-mail. If you send the request by e-mail, we recommend that you use encrypted e-mail.
You can also make the request by phone or by visiting one of Kela’s customer service locations in person.
Be prepared to prove your identity.
If needed, you can use a representative.
Kela's appointed privacy officer
Kela's appointed privacy officer is Regina Ollila.
tietosuoja (a) kela.fi