Tietosuojalaki Chapter 1 (Yleiset saannokset) Sections 1-3. SECTION 1 SCOPE (Soveltamisala): the Act supplements + specifies GDPR in Finland; applies in respect to the processing of personal data falling within the scope of GDPR + the Law Enforcement Directive (EU) 2016/680 (transposed by Tietosuojarikoslaki 1054/2018). SECTION 2 MATERIAL SCOPE (Lain soveltamisala): the Act applies to natural-person personal data + supplementary national rules on lawful basis + special categories + criminal data + identification code + research + statistics + freedom of expression. SECTION 3 DEFINITIONS (Maaritelmat): definitions cross-reference GDPR Article 4 + additional Finnish-specific terms including 'Henkilotunnus' (personal identity code) + 'Tietosuojavaltuutettu' (Data Protection Ombudsman) + 'Seuraamuskollegio' (Sanctions Collegium). The Act is a 'sui generis' national supplement to GDPR + does not impose substantive obligations beyond GDPR + Tietosuojalaki + sectoral acts.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.