Whenever data stored in the Kanta Services are processed or transferred, the action generates a log entry. Log entries are used to verify that the data are used appropriately and in compliance with privacy protection requirements.
Each social welfare or healthcare service provider and each pharmacy is responsible for the data in their respective data files
A log on data processing and transfers is kept separately for each client data file. Each social welfare or health care service provider and each pharmacy is responsible for overseeing the processing of client and patient data acquired through their operations.
If misuse of data is suspected
Each service provider and pharmacy must have a plan for what to do if misuse of data is suspected in the organisation. If any non-conformities in the use of data are observed through monitoring procedures, then the service provider or pharmacy must launch an investigation according to its established practices.
See also the guideline on what to do if you suspect a data security breach concerning personal data.
Data processing monitoring is also supported by the data security plan that every service provider and pharmacy must prepare before beginning to use the Kanta Services.
Data subjects can oversee the processing of their data
Clients may check for themselves in MyKanta which organisations have processed or transferred their data. However, the names of the individuals who processed the data are not shown in MyKanta because of privacy protection.
Data subjects who wish to obtain a more detailed report on how their data have been processed must request log data from the social welfare or healthcare service provider or the pharmacy on whose data file those data are stored.
Clients may also submit a request for log data to Kela. Kela may only disclose to clients the log data which Kela itself control.
Kela may disclose to clients log data on:
- medication prescriptions stored in the Prescription Centre,
- data transfers from the system for issuing declarations of intent,
- data transfers from the Information Management System,
- MyKanta login details,
- Kanta PHR.
Read more about the ability of citizens to oversee processing of their data.