Sensitive health data of children exposed in Janakkala municipality’s online documents

A data protection breach in the municipality of Janakkala has exposed sensitive health information and other identifiable personal details of children on the municipality’s public website, reports Finnish broadcaster Yle.

The incident occurred during preparations for restructuring the local school network. Confidential documents, including children’s health records and personal data, were publicly accessible and downloadable on the municipality’s website for nearly a week. Multiple families have been affected by the breach.

Mika Silvennoinen, Janakkala’s director of education, acknowledged the error and expressed regret over the exposure of protected information.

“This is deeply regrettable, but it happened as part of an exceptionally broad preparation process,” Silvennoinen told Yle. “Material subject to data protection was published when it should not have been.”

The municipality attempted to remove the documents but initially failed to fully redact the sensitive content. Silvennoinen confirmed that the files—submitted by residents as part of public consultations on school closures—have since been completely taken down.

A concerned parent, who wished to remain anonymous to protect their child’s privacy, warned that digital traces of the exposed data may persist. They noted the risk of misuse and confirmed plans to file complaints with Finland’s Data Protection Ombudsman and the Parliamentary Ombudsman. Yle has seen correspondence indicating the municipality has also reported the breach to authorities.

The incident follows controversy over Janakkala’s proposals to close four rural schools, including Virala School, which have sparked local opposition.