Provisions concerning the processing of personal data by the police to be updated

New legislation is proposed for the processing of personal data by the police. The Ministry of the Interior has sent out for comments a draft law concerning the processing of personal data by the police. The new personal data act of the police would replace the existing provisions concerning the processing of personal data by the police. The new act must fulfill the requirements of the EU’s updated data protection legislation, taking into account the needs of crime prevention and the requirements of basic and human rights.

The aim is to present the Government proposal to the Parliament so that it could be processed as simultaneously as possible with the Government proposals concerning the implementation of the EU’s data protection legislation. The EU’s new data protection legislation was approved on 27 April 2016. The project for introducing the new act will also implement the Directive of the European Parliament and of the Council on the use of passenger name record (PNR) data for crime prevention, which was approved simultaneously with the data protection legislation.

Opportunities of the police for efficient criminal intelligence would improve

The section concerning a suspect data system will be replaced by a provision concerning the processing of personal data for the purposes of criminal intelligence. The new regulations would improve the opportunities of the police to prevent and investigate crime through efficient criminal intelligence. Through criminal intelligence, data important for crime prevention are acquired and analysed and reports prepared about crime, criminals, criminality and its consequences, and phenomena putting society in danger.

New powers will not be proposed for the police for data acquisition. Instead, the opportunities of the police to process the personal data acquired using their existing powers will be secured. In future, personal data could be processed more efficiently in order to prepare crime analyses of organised crime or criminal groups and with regard to broader entities, for instance.

At the same time, the provision would provide the police with better opportunities to process the data of different person groups. Data on persons connected with crime or criminal action in one way or another and those under police surveillance would be recorded in the system. In addition, data on persons repeatedly contacting or meeting persons connected with crime or criminal action could be processed for the purposes of criminal intelligence.

The police could also process the personal data of witnesses, victims, persons reporting crime and complainants for criminal intelligence. However, if the question is not of persons suspected of actual criminal action, the threshold for processing personal data would be higher so as to guarantee data protection and legal protection. The police could only process the personal data of such persons for criminal intelligence purposes if necessary for preventing, uncovering or investigating crime.

Air carriers’ passenger name record data could be utilised more extensively in preventing serious crime

The EU’s passenger name record directive obliges air carriers to transfer specific passenger data to Passenger Information Units established or appointed by the EU members states for preventing terrorism and serious criminality. Passenger name record data refers to a register containing the details of each passenger and the booking data submitted by the passenger. In Finland, the Passenger Information Unit would be established by the police, Customs and the Finnish Border Guard.

The Passenger Information Units analyse the data based on specific criteria and compare the data with national and international databases of relevance to preventing terrorist crime and serious criminality. The draft law also proposes the establishment of a new personal data file by the police for this purpose. Passenger information should be kept in the Passenger Information Units for five years.

For more information, please contact:
Suvi Pato-Oja, Senior Adviser, tel. +358 2955 488 379, suvi.pato-oja@intermin.fi