When data is stored, the controller is responsible for the processing and storage of the data in accordance with legislation. If you want to know what data has been recorded about you, please contact the controller responsible for the data. For example, the data controller can be the wellbeing services county that maintains the patient data.
The information that you can retrieve yourself or request from social welfare or healthcare services
You can use MyKanta to view
- what information about you has been recorded in the Kanta Services
- where your data has been processed.
A healthcare service unit, such as a wellbeing services county, is the controller of patient data. Patient data is the information about you that has been recorded by the healthcare services.
You can request log data concerning patient data and data processing from the healthcare service unit that recorded the data. Kanta Services do not have the right to disclose patient data.
Liisa wants to find out who has been looking at her patient data, which are stored in the patient information system when she has a doctor’s appointment. Liisa needs to contact the healthcare service unit where she has been managing her affairs. She can request log data on the access of her patient data from the healthcare service unit concerned.
The controller of social services client data is the social welfare service provider, such as the wellbeing services county. You can request log data concerning client data and data processing from the social welfare service provider that recorded the data. Kanta Services do not have the right to disclose client data.
Matti wants to find out who has been processing client data regarding him that is stored in the wellbeing services county’s social services client information system. Matti needs to contact his wellbeing services county and request his log data regarding the accessing of his client data.
Data and logs stored in the Kanta Services
The healthcare and social welfare service providers are the controllers of and responsible for client and patient data generated in the course of their activities.
Kela is the controller or joint controller of the data stored in the Kanta Services for the following services:
The Prescription Centre stores electronic prescriptions, along with their dispensing notes made in pharmacies, issued for clients in social welfare and healthcare services. Data stored in the Prescription Centre can be disclosed from 2010 onwards, or from the first time a client’s prescription data was stored by electronic means. The client can also see the details of all their prescriptions stored in the Prescription Centre in MyKanta.
The declaration of intent service is used for storing information on the patient having received information about Kanta Services and on the common patient register used in the wellbeing services counties. The declaration of intent service is also used for storing the patient’s consent to sharing their patient data, the withdrawal of a consent and the denials and withdrawals of denials of consent set up by the patient.
The patient’s living will, organ donation testament and consent for cross-border prescriptions are also stored in the declaration of intent service. This information is available in MyKanta.
The Information Management System compiles essential patient data from patient documents and produces summaries of them for the purpose of delivering treatment. In MyKanta, clients can view the data compiled in the Information Management System and see to which service provider the data has been disclosed.
Log data is stored every time a client logs in to MyKanta. MyKanta login data includes, for example, the client's personal identity code, exact login time, and IP address from which the person logged into MyKanta. The client can request login data for the desired period from Kela.
Social welfare and healthcare service professionals can access the data recorded about the client through their client or patient information systems. The MyKanta login log data does not store information on whether the data has been accessed via a client or patient information system.
The usage log data register of the PHR stores information on granting and removing access rights to applications as well as storing, viewing, updating and deleting wellbeing data. The user has the right to receive their own usage log data from Kela, which is stored in Kanta PHR when logging in and using the service.
Kelain is intended for the private use of doctors and dental nurses issuing prescriptions on the basis of their professional licence without the intent to procure revenue. Private use refers to situations where a prescription is not drawn up in the name of a self-employed person or healthcare operator. For example, a retired doctor or dentist can use Kelain. It can also be used by a doctor or dentist who writes a prescription in their leisure time, for example, for a family member.
The national contact point log data includes the Cross-Border Prescription disclosure log data and the Patient Summary disclosure log data. The summary includes medication information and key health data sets stored in the Information Management System, as well as information about the foreign healthcare service provider that requested the data.
The log data file of patient data to be disclosed to a wellbeing application stores information about the granting and removal of access rights to wellbeing applications. The log data file stores information that the user has received the ‘Sharing patient data with a wellbeing application’ information, and the date when the user was informed. The data file also stores the wellbeing applications to which the patient data has been disclosed and when and what patient data has been disclosed.
For more information on the data stored, please see the privacy policies.
Data requests include a request to review information and a request for log data.
By submitting a request to review personal information, you can find out what data about you has been stored in the Kanta Services. A request to review personal information can provide you with your prescription data stored in the Prescription Centre and your data stored in the declaration of intent service from the Kanta Services.
You will receive a reply to your request to inspect information within one month of the request having been received. If a reply cannot be provided within this period, the processing of the request may be extended by two months.
With a request for log data, you can find out how your data has been used or disclosed by social welfare and healthcare services or pharmacies. Log data will be provided for a maximum period of the previous two years. For longer periods, log data can only be obtained for a specific reason.
You will receive a response to your log data request within two months of the request having been received.
The reply to your request for data will be sent by registered mail and you can pick it up at the post office. Take your ID with you.
How to make a request to inspect personal information or to receive log data
You can make a request to inspect information or receive log data either by using the official form or by writing a free-form request.
- Fill in the form or make a free-form request to inspect information or receive log data. Forms are also available from healthcare service providers, pharmacies or Kela offices.
- Inspection request (kela.fi, pdf)(opens new window)
- Log data request (pdf)(opens new window)
- An informal request to review personal information or receive log data must include:
- your personal identity code
- your name and contact details
- information on what data you wish to receive and from which time range.
- Submit the request to Kela. You can submit a request
- by posting it to: Kela, Registry, P.O. Box 450, 00056 KELA
- by bringing it to a Kela office (kela.fi) (opens new window)
- by calling the Kela service number 020 634 4588
- by sending an email to kirjaamo@kela.fi.
- If you make the request by email, it is recommended that you use encrypted email. Find out more about sending an encrypted email (kela.fi, pdf)(opens new window)
How do I request my data from private service providers that have ceased operations?
If the private service provider has ceased its operations, submit a request for data to Kela. Kela will forward the data in the data request to the relevant wellbeing services county or the City of Helsinki. The wellbeing services county or the City of Helsinki is responsible for disclosing the data to the client. Instructions on how to request data can be found on Kela’s website:
If you suspect that your data has been misused
If you suspect that your data has been misused, please contact the social welfare or healthcare service or pharmacy where you have managed your affairs.
Suspected misuse of data abroad
If you suspect that your prescription or patient data has been misused in a pharmacy or healthcare service unit in another European country, please submit a request for clarification by contacting Kela’s Registry:
- Postal address: Kela, Registry, P.O. Box 450, FI-00056 KELA
- Email: kirjaamo@kela.fi
- Phone: 020 634 11 (switchboard), weekdays from 9am to 3pm.