Protection of personal data and privacy

The Data Protection Inspectorate makes sure that people’s private information (personal data) is sufficiently protected. The Inspectorate also ensures that information on the activity of institutions (public information) is sufficiently available. The right to the protection of personal data and the right to public information are constitutional rights. The constitution also grants everybody the right to inquire about the data collected about their person.

Personal data

Personal data signifies any information that makes it possible to identify a person directly or indirectly: name, picture, fingerprints, family data, place of residence, workplace, etc. Some data are considered sensitive (religious and political affiliations, information on health and sex life, etc).

The law gives people the right to request:

  • information on the nature and purpose of the data collected about them and used;
  • correction of inaccurate personal data;
  • termination of unlawful collection, use and publication of personal data.

Above all, it is up to everyone to ensure the safety of their data. If you keep information pertaining to you carelessly or disclose it yourself, you can harm yourself – from a deluge of spam email to account or identity theft. If your rights have been violated and the violator does not respond to your request, please turn to the Data Protection Inspectorate.

If you seek compensation, apology and repudiation, you need to turn to the county court. Cases of defamation (slander, insult) should also be reported to the county court.

When dealing with a potential crime, please turn to the police: for example in the case of identity theft, unauthorised surveillance, illegal human research or illegal publication of sensitive personal data.

The Personal Data Protection Act does not apply to the collection and use of personal data for personal purposes and within the limits of the private sphere.

Public information

Public information comprises the documents, databases etc created by institutions while performing public duties. Access to public information can be restricted only on the basis of law. Information in state or local government institutions might be necessary for a person as well as an enterprise, an organisation, a media publication or a scientific institution.

The availability of public information makes the activity of the state transparent. It ensures more effective control over the exercise of public authority, the performance of public duties, and the use of public money. The Public Information Act is binding to institutions as well as enterprises and other persons governed by private law who perform public duties or use public money. Examples include the provision of social services, private child care institutions, etc.

The availability of public information is ensured in several ways:

  • by submitting a request for information (to be answered in 5 working days);
  • the institution’s website has a register for incoming and outgoing documents, documents with no restriction on access can be opened by clicking;
  • by publishing important information on the institution’s website.

Request for information can be used to ask for information already available at the institution. When requesting an explanation from an institution or drawing attention to a problem, you are dealing with a request for explanation or a memorandum. These are answered within a month.

Restrictions on access to public information have mostly been set for the protection of people’s privacy. The restrictions may also result from other laws. Restriction on access can be imposed on a complete set of documents – for example correspondence with private persons. Restriction on a complete set means that, upon the submission of request for information, the specific document is reviewed to determine if the restriction can indeed be applied.

Open data

Open data means the data in a machine-readable format that is made available for public use and that has no limits to usage or sharing. Therefore, personal data with restrictions on access and data, the sharing of which is limited by law, are not considered open data.

The Open Data Portal is intended to facilitate the disclosure of data for offices and to simplify finding of such sets of data for users of open data. Anyone can access the portal.

The following activities are possible in the Open Data Portal:

  • searching for and downloading open data.
  • adding new open data: prior registration and access rights from the administrator of the portal are required.
  • using the data set storage, which is one of the places to store open data.
  • using and finding applications created on the basis of open data.
  • posting news, questions, discussions, and instructions about open data.

The data to be disclosed includes all data sets created by state offices and local governments, the public use of which is not directly prohibited and which contain data other than personal data.

The disclosed data does not contain personal data and does not enable the identification of people by matching the disclosed data, except in the cases where the information is already public (e.g. employees of ministries).

More information and instructions for use can be found on the website of the Open Data Portal.

How to turn to the Data Protection Inspectorate

If your rights concerning public information have been violated (e.g. request for information is not answered), you may turn to the Data Protection Inspectorate with a challenge. You may also use a memorandum to notify the Inspectorate of other issues related to the Public Information Act.

Last amended: 14-02-2017 00:00 | Compiled by: Data Protection Inspectorate