Prosecutor concludes investigation into data protection allegations against Savoa Partners in Satakunta

The prosecutor has concluded the preliminary investigation into the alleged data protection violations by consultants used by the Satakunta wellbeing district. The decision was made in accordance with the proposal from the lead investigator.

In March, the Satakunta wellbeing district requested an investigation by the police to determine whether employees of the consulting firm Savoa Partners had committed a crime while acting as consultants under a service contract with Satakunta. The district began examining possible misconduct and potential data breaches after an interview with a Satakunta representative by Yle’s MOT team highlighted concerns about the firm’s operations. Subsequently, collaboration with the consulting firm was suspended at the end of February.

The consultants were tasked with training and supporting the implementation of multidisciplinary teamwork methods, during which they had access to patient data. The matter has been investigated as a potential data protection crime.

The investigation was concluded with a determination of no crime having occurred. According to a statement from the prosecutor’s office, the investigation found that “the consultants were professionals in the healthcare sector, and based on the provided evidence, they cannot be considered as outsiders without the right to view patient information. Furthermore, even if the consultants were deemed to have an outsider status, any violation of privacy protection was minimal.”

The prosecutor’s office also stated that the Satakunta wellbeing district has issued a public notice about the possible data breach, in line with the guidance from the Data Protection Ombudsman, allowing affected individuals the opportunity to come forward. However, no individuals have reported thus far.