Data security and the processing of data

The processing of personal data in the Positive credit register

Information about private individuals’ loans and income is collected in the Positive credit register. The register will be rolled out in spring 2024.

The rollout takes place in two stages. In the first stage, information on consumer credits and loans comparable to them will be recorded in the register. Lenders can report loan contract data and request data from the register as of spring 2024.

In the second stage, at the end of 2025, lenders start reporting loans granted to natural persons other than consumers, such as private traders. Lenders can request data included in the second stage as of spring 2026.

Controller and Data Protection Officer

The Tax Administration’s Incomes Register Unit is ‘controller’ within the meaning of the General Data Protection Regulation (EU 2016/679).

The Tax Administration's Data Protection Officer is Noora Kontro, Senior Specialist, and her deputy is Hanna-Mari Korva, Senior Specialist.

In what situations is personal data processed?

The Positive credit register’s customer service was opened in September 2023. Lenders started to sign up as data notifiers and to apply for data permissions for requesting data from the Positive credit register at the beginning of October 2023.

In this stage, personal data is processed in connection with the Positive credit register's stakeholder cooperation, stakeholder testing and customer service, in the processing of sign-up requests and data permission applications, and in actions regarding certificates issued for the reporting and requesting of data. In addition, personal data is collected with the feedback and observation forms available on the Positive credit register’s website.

Loan contract data on consumer credits will be recorded in the register starting February 2024.

Data recorded in the Population Information System and in the Business Information System is processed in connection with the Positive credit register's customer relationship management. This data is received from the Incomes Information System, and it is shared with the Positive credit register under section 13 a of the act on the Incomes Information System (Laki tulotietojärjestelmästä 53/2018).

Privacy statements

Record of personal data processing in the Positive credit register and in customer service

Record of personal data processing in the project to establish a positive credit register: subscribers to the newsletter on the Positive credit register and to the project newsletter

Record of personal data processing in the project to establish a positive credit register: persons signed up for stakeholder cooperation and persons participating in stakeholder testing

Personal data is confidential

The data recorded in the Positive credit register is confidential, with the exception of the name and the Finnish Business ID or foreign business ID of a business operator that is required to submit reports. The Incomes Register Unit can publish these pieces of information on its website. Other personal data may be disclosed only for the purposes laid down in the Act on the Positive Credit Register and in the Act on the Openness of Government Activities (sections 11 and 12; section 26, subsection 3; section 29, subsection 1, paragraphs 3 and 4).

Access to one’s own information

You have the right to know if we are processing your personal data. If we are processing your personal data, you have the right to receive a copy of the data. As an interested party, you also have the right to receive information about documents that concern you.

If you want to view your personal data, please contact the Positive credit register’s customer service.

Correcting incorrect data

If you detect that a piece of information about you is incorrect, you have the right to ask us to correct it.

If you detect an error in your personal data and want to ask us to correct it, please contact the Positive credit register's customer service.

Right to lodge a complaint with a supervisory authority

If you suspect that your personal data is processed contrary to the data protection regulations, you have the right to lodge a complaint with the Data Protection Ombudsman. Further information and instructions on how to make a complaint is available on the website of the Office of the Data Protection Ombudsman.

Accessibility

Accessibility of the positivecreditregister.fi website

Accessibility of the Enter portal

Accessibility of the Positive credit register’s e-service for organisations

Page last updated 6/28/2023