Tietosuojalaki Sections 4-5 (lawful basis) + Section 29 (personal identity code). SECTION 4 LAWFUL BASIS: GDPR Article 6(1)(e) public-interest task + Article 6(1)(c) legal obligation are clarified for Finnish public authorities + statutorily-tasked private entities; processing for archival + scientific research + statistical purposes in the public interest is also covered. SECTION 5 OUTPUTS: GDPR Article 6(1)(c)/(e) bases may be invoked when processing is necessary for performance of statutory tasks. SECTION 29 PERSONAL IDENTITY CODE (Henkilotunnus): the Henkilotunnus is the central Finnish national identifier (11-character: DDMMYY-NNNX). Processing requires: (a) the data subject's CONSENT; OR (b) statutorily provided; OR (c) necessary to UNIQUELY IDENTIFY the data subject for performance of a statutory task or contract + identification by other means insufficient. PURPOSE LIMITATION: the code may NOT be unnecessarily printed + must be removed from documents + display unless required + must be deleted when no longer needed. The 2023 Henkilotunnus reform introduced new identifiers separating gender + date-of-birth fields; the Population Register Centre coordinates issuance.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.