Based on the EU’s General Data Protection Regulation, you have the right to access your personal data recorded in the Kanta services.
By law, you are also entitled to know who has processed the data recorded about you in the Kanta services or who that data has been shared with.
You can request the log data concerning your personal data recorded in the Kanta services or the processing of this data from the controller of the data in question at any one time. Controllership of the data in each Kanta service and the data recorded in this service has been specified in legislation.
Kela acts as controller of the Prescription Centre and the patient data management service. Information about your prescriptions is recorded in the Prescription Centre and a record of information given to you, your consents, refusals and declarations of intent is saved in the patient data management service.
Patient data recorded of you in the healthcare services is saved in a collective form in the Patient Data Repository of the Kanta services. The law sets the healthcare service provider as the controller of patient data.
Therefore, you can request the log data concerning your patient data or the processing of the patient data from the healthcare service provider that has recorded the data or if you want to investigate the data processing it has carried out. Kela’s Kanta services do not have the right to share patient data.
In the following, we explain further which type of information you can request and receive from Kela’s Kanta services. After that, we will provide instructions on how to submit a data request to Kela’s Kanta services.
Which information can I request from the Kanta services?
You have the right to know what personal data has been recorded of you in the Kanta services. You can view your personal data recorded in the Kanta services through My Kanta Pages. However, it is also possible to obtain the data in other ways.
Kela acts as the controller of the Prescription Centre and the patient data management service, and therefore you can request and obtain your personal data recorded in the Prescription Centre and the patient data management service from Kela’s Kanta services.
All data about your prescriptions is entered in the Prescription Centre and a record of information given to you, your consents, refusals and declarations of intent is saved in the patient data management service.
You also have the right to know who in the social welfare or healthcare services or pharmacies has viewed or processed your personal data recorded in the Kanta services.
As the controller of the Prescription Centre and the patient data management service, Kela enters the log data of the processing of data recorded in the Prescription Centre and the patient data management centre.
If you want to find out about the processing of your data recorded in the Prescription Centre or the patient data management centre, you can ask for the log data from Kela's Kanta services.
The log data is handed over in accordance with the law and, as a rule, for the previous two years or, on request, for a shorter period. It is possible to obtain the log data for a period longer than the past two years only for a special reason, which may include, e.g., a strong and specified suspicion of inappropriate processing of data at a healthcare unit or pharmacy. The possibility of handing over log data over a longer period is always assessed in the Kanta services in each case separately.
How to submit a data request to Kela’s Kanta services
As described above, you can request the following information from Kela’s Kanta services:
- Data recorded in the Prescription Centre
- Data recorded in the patient data management service
- Log data on the processing of data in the Prescription Centre
- Log data on the processing of data in the patient data management service
The data request can be made in writing or verbally. The data request is delivered to Kela with one of the following methods:
- by post (Kela, Kirjaamo, PL 450, 00056 Kela)
- by email (firstname.lastname@example.org)
- verbally at a Kela customer service point or by telephone.
Please note that if you submit a data request by email, we recommend using email encryption. A link to instructions for email encryption is available here: https://www.kela.fi/yhteystiedot-hallinto.
You can use a data request form for submitting a data request. The form is available at healthcare services, pharmacies and Kela’s customer service points.
You can also submit the data request in a free format. In that case you need to provide the same information that is requested on the form in order to process the data request. You need to give your personal identity code, name and contact details, and the data you are requesting, as well as the period for which you wish to obtain the data.
Kela’s registry will forward the data requests to Kanta services for processing. You will receive a response to your data request within one month. If it is not possible to provide the information within this time for a justified reason, the processing of the data request may be continued for a maximum of two months.
The response to the data request will be delivered by post, and it can be collected from the post office by showing an identity document.