Legal expert

Briefly explain what you do for a living.

In my work, I deal with requests for guidance and advice related to data protection legislation and data subjects’ data protection rights, as well as notifications made by organisations on personal data breaches. I serve customers in writing and by telephone.

How have you ended up in the profession of your choice?

I became interested in data protection issues in the early stages of my studies for a bachelor of business administration with a specialism in law. I simultaneously worked as a nurse, and the introduction of the new patient information system raised many questions. At that time, the health and social services reform was also under way, and I wanted to familiarise myself with it in my thesis, particularly from the perspective of data protection regulations.

At the end of my studies, I did not have to think long about my traineeship, as a the Office of the Data Protection Ombudsman was looking for a trainee in a unit that deals with matters related to data protection in social welfare and health care. After the traineeship, I was offered the opportunity to continue working as a legal expert.

Describe your typical working day or week.

During the working week, I have the opportunity to tackle a wide range of tasks both independently and in cooperation with my colleagues. I provide advice in matters related to the processing of personal data to data subjects or individuals, and controllers or organisations, as well as data protection officers of organisations. I also deal with information security breach notifications and requests concerning the rights of customers of social welfare and health care. The requests can be related to, for example, the correction, completion, deletion, or review of customer and patient data. I also prepare different types of requests for clarification, additional information and responses.

My working week includes some meetings involving the matter at hand, that is, data protection, and going through topical issues. In addition, I participate in various kinds of training. I am also actively involved in the development and process work taking place at the office.

What kind of work environment or working hours do you have?

I work both in the office and remotely. Most of the work is done during office hours, but we use flexitime, which means that I can work flexibly when the work task permits.

What kind of competence or qualities are required in the profession?

This position demands an interest in legal matters and the ability to understand how the judicial system works. The profession requires legal competence and provides a good basis for an extensive learning of data protection regulation.

Good cooperation and information retrieval skills, attention to detail and a willingness to acquire new knowledge are important characteristics in my work. The data protection regulations, decision-making practices and instructions are constantly updated, which means that the tasks require continuous development of professional skills. 

What is the best thing about your profession?

The best thing about my profession is that I have an opportunity to work on data protection issues with experienced professionals in the field. Regulations related to data protection extend to both the national and international level, the public and private sectors and to various professional fields. For this reason, the tasks are varied.

What are the downsides of the profession or what seems challenging?

Finland has more than 700 provisions on how personal data should be processed in different situations. Adopting extensive regulations often requires persistence.

What would you tell a person considering the profession of a legal expert?

Data protection offers a wide range of opportunities for developing your competence on important issues. Expertise gained in other fields is beneficial in this profession. It is worth applying for a legal expert’s position even if you do not have experience in data protection work. It is possible to proceed from this role to, for example, an inspector or a senior inspector, when the qualification requirements are met.

How do you see the future of your profession?

Data protection regulations are becoming increasingly important. They also involve issues to do with fundamental rights and human rights, following the development of digitalisation and various smart solutions. The tasks of the supervisory authorities will increase as their power is expanding as a result of the new regulations. The demand for expertise in data protection and professionals in the sector will increase both in public authority activities as well as outside them.

The interview was conducted in cooperation with the Oikeus.fi website.