More than ten Finnish health data registers operate without legal basis, report finds

A new investigation reveals that Finland’s Institute for Health and Welfare (THL) maintains over ten health data registers without the constitutionally required legal framework, despite handling sensitive patient information, Yle reports.

Researchers from the University of Eastern Finland found that registers for vaccination, emergency care, fertility treatments, pregnancy terminations, sterilisation, and cancer—along with primary and specialised healthcare notification registers—lack proper legal regulation. The Deputy Chancellor of Justice previously flagged this issue to the Ministry of Social Affairs and Health in 2014.

Professor Tomi Voutilainen emphasised that legislation must precisely define the grounds and duration for storing health data, as such information is highly sensitive and closely tied to privacy protection.

The report also highlights underuse of the national Kanta service, where patient records are stored but not actively utilised in treatment. Voutilainen noted that patients often face repeated questions about the same information when transferring between providers, citing an example where a patient had to manually list medications despite them being recorded in Kanta.

Finland’s healthcare digitalisation remains incomplete, with centralised diagnostic data and a national medication list—under development since 2016—still unfinished. Voutilainen suggested that addressing these gaps could improve efficiency and yield savings, urging a comprehensive overhaul of outdated systems and regulations in the next electoral term.