Act on Privacy in Working Life (Laki yksityisyyden suojasta tyoelamassa, 759/2004) - Finnish workplace privacy law operating alongside the Tietosuojalaki. SCOPE: applies to all employer-employee relationships in Finland + processing of employee personal data. KEY PROVISIONS: (a) NECESSITY PRINCIPLE - employer may process only personal data necessary for the employment relationship; (b) DIRECT-FROM-EMPLOYEE COLLECTION - employer must collect personal data from the employee in the first instance + may collect from third parties only with employee consent + statutory basis; (c) DRUG TESTING - permitted only under statutory basis + with employee notification; (d) PERSONALITY + APTITUDE TESTING - permitted with employee consent + use of validated methods; (e) HEALTH DATA - special protection + occupational health practitioner safeguards; (f) ELECTRONIC COMMUNICATIONS + EMAIL INSPECTION - employer may inspect employee email under STRICT CONDITIONS: business necessity + advance information + employee absence prevents inspection + technical or content inspection separately authorised + Sections 18-22 procedural requirements; (g) WORKPLACE MONITORING + CCTV - permitted with employee notification + work council co-determination + GDPR Article 88 compliance. COORDINATION: with the Tietosuojalaki + GDPR Article 88 (Member State derogations for employment context) + the Co-operation Act (Yhteistoimintalaki, 1333/2021) which requires employee consultation on workplace monitoring + data processing.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.