The EU General Data Protection Regulation sets out the rights of the data subject. The operation of the Kanta Services is based on national special legislation, in which case not all of the rights presented in the General Data Protection Regulation are applicable as such to the data entered in the Kanta Services.
The Kanta Services implements the following rights of the data subject in so far as they fall within Kela’s remit:
- the right of access to own data
- the right to know who has processed the data
- the right to demand rectification of incorrect data.
If you want to inspect the data that has been entered about you in the Kanta Services and how it has been handled, you will find instructions on the page What kind of data has been recorded of me?
Kela acts as the primary point of contact in requests concerning the exercising of a data subject’s rights in matters that fall under the remit of Kela’s joint controllership. If necessary, Kela will assist in the clarification of a request concerning a data subject and, if necessary, it will forward the request to the correct place.
If you notice inaccurate or insufficient information in your prescription, patient or client data, you have the right to demand that the inaccurate data is rectified. Incorrect data shall be rectified in the healthcare or social welfare service provider’s unit or pharmacy where the entry was made. Service providers and pharmacies are always responsible for the contents and accuracy of the data they record. In matters pertaining to Kela’s joint controllership, Kela can assist in the clarification of a request concerning a data subject, if necessary.
You also have the right to submit a complaint to the authority, i.e. the Data Protection Ombudsman, if you feel that you are unable to exercise your rights of a data subject.