A permit service is being developed to allow users to submit one application for use permits to data in several data sources. This will mean that each authority will not have to be contacted separately. Read more about the service »
A central authorising body is also being considered for Finland that would grant health and welfare data use permits and process data requests. Read more about the changes »
In addition to the use permit, a research permit from the organisation acting as the research site may be required, as well as certain reports to the authorities.
Expand all / Collapse all
Use permits granted by the authorities
The permit for health and welfare data is typically granted by the authority acting as the data controller. If permits are required from several authorities under the same ministry, the permit will be granted by the ministry in charge.
In addition to the data it manages, THL grants use permits for patient documents and social welfare customer documents if the research uses documents from a private service provider, independent practitioner or one or more municipalities or joint municipal authorities. THL also grants permits for using data in the Prescription Centre and the Prescription Archive, even though Kela is their data controller.
What are the purposes use permits can be granted for?
By default, it is forbidden to handle sensitive or confidential health and welfare data, or disclose it to third parties. The current legislation does permit an exception to this if sensitive or confidential personal data is to be used for scientific research, statistics, or the planning or investigation activities of a public authority. In addition, new legislation is being prepared to allow the use of health and welfare data for activities such as development and innovation. Read more about the changes »
What are the things I should take into account in the use permit application?
At minimum, the following information is required for the permit application:
Additionally, you also need:
The permit decision is subject to a charge that varies by data source and applicant. The expected duration of the permit process also varies. The expediency of the process will benefit from a carefully prepared application.
Tips for the permit application have been listed in the table below, categorised by data source. The table also includes links to the websites of permit-granting authorities that provide information about the permit applications for the data maintained by the authority in question. The permit websites also include details about the charges and fees of the permit decision.
The use permit dictates how data can be used
Fees on use permits and data collection
The permit and the data collection are usually subject to a charge. The use permit fee is a one-time charge. The data collection fees are hourly charges and hence depend on the extent of the data to be collected. Changes to a granted use permit are also subject to a fee that is less than the fee charged for the original use permit. Use permits for theses may be eligible for a discount.
|Authority||Permit fee (excluding VAT, 24%)||Data collection fee and other charges (excluding VAT, 24%)|
|Statistics Finland More info »||No separate charge for the permit. Price of the permit is included in the price of the data assignment. A data assignment includes free of charge 10 hours of preparatory work. Any work exceeding this is subject to a charge of €105/hour.
Extension or expansion of permit: 150 €.
|Research service, €105/hour.
Pre-compiled data is subject to a charge between €300 and €600.
The remote use of research data is subject to a monthly or annual charge that depends on the number of researchers. The prices start at €1,500/year, €200/month.
|National Institute for Health and Welfare (THL) More info »||
Use permit for international disclosure: €700.
Decision on the extension or verification of an existing use permit, or for adding research team members: €50.
|The charge for research data collection is based on the working hours used.|
|Social Insurance Institution of Finland (Kela) More info »||
New use permit or a decision to expand the data: €300.
Use permit for a thesis: €150.
Decision to extend an existing use permit: €100.
|Finnish Institute of Occupational Health (TTL) More info (in Finnish) »||No separate charge.||The collection and combining of data is subject to a charge according to the working hours used. The permit applicant will be informed of the potential charges before the work is undertaken.|
|National Supervisory Authority for Health and Welfare More info (in Finnish) »||
New use permit: €250.
Use permit for a thesis: €80.
Specialist work: €225/hour.|
Assisting work: €90/hour.
|Population Register Centre More info (in Finnish) »||
Delivery fee for collection: €660.
Control collection fee: €550.
The Population Register Centre charges for data collected from the Population Information System according to the data units. The data unit charge is based on the total number of units. Charges start from €0.022/data unit.|
|Legal Register Centre More info (in Finnish) »||No separate charge.||€50.93/hour.|
|Finnish Centre for Pensions More info (in Finnish) »||The price of the office work required by the permit application (minimum one working day) is added to the data disclosure fee.||All direct person-hour and IT costs resulting from the disclosure of data will be charged. Collection from the pension and earnings register are evaluated separately. An estimate of the costs will be provided in advance.|
|Finnish Biobanks||The costs will be determined in the Material Transfer Agreement (MTA) signed with the researcher’s organisation. The THL Biobank has the most detailed pricing information of the biobanks, and the information is available on their website.|
Reports to the authorities
According to current legislation, you must notify the Data Protection Ombudsman if you use sensitive personal data in your research without the subjects’ consent. Once the decree on personal data enters into force, the general duty of notification will be rescinded. The future data protection authority will only be consulted in cases where the processing of personal data carries a high risk, according to the preliminary impact analysis.
The data protection authority must be notified of any data security breaches without undue delay. The data subjects must also be notified of the breaches if they pose a high risk to the subjects’ rights and liberties.
The Medical Research Act lists special requirements for the notices sent to ethical review committees and the Finnish Medicines Agency (Fimea) regarding clinical pharmaceutical research. These notices concern the starting, progress, ending and premature discontinuation of research.