When you apply for a data permit from Findata, you also take on responsibility for the lawful processing of personal data. This course helps you understand what that means in practice.
We cover the legal basis for processing personal data, research planning, and the responsibilities of the controller. The content is based on the EU General Data Protection Regulation (GDPR), the Data Protection Act, and the Act on the Secondary Use of Health and Social Data (Secondary Use Act).
When personal data is processed in accordance with data protection legislation, it also strengthens data subjects’ trust in research. This trust is essential for ensuring that health and social data can continue to be used in research in the future.

Co-funded by the European Union. Views and opinions expressed are however those of the author(s) only and do not necessarily reflect those of the European Union or European Health and Digital Executive Agency. Neither the European Union nor the granting authority can be held responsible for them.
Findata is the Finnish social and health data permit authority that provides guidance on the secure and lawful use of data. General guidance on data protection matters is provided by the Office of the Data Protection Ombudsman.
Curriculum
- 4 Sections
- 13 Lessons
- 30 Minutes
- Basics of personal data processing in research5
- Planning the use of personal data in research4
- Responsibilities in the processing of personal data3
- Conclusion2
Instructor
