When you are provided with a diabetes device and share self-monitoring data related to the diabetes device with a healthcare unit via a cloud service, healthcare professionals use this information in planning and providing your care and record the information in your patient records. This self-monitoring data is part of the patient register of your wellbeing services county, and the wellbeing services county acts as the data controller.
What is the processing of data based on?
The processing of personal data must always be based on legislation. Wellbeing services counties process patient data in order to fulfil their statutory obligations and carry out public healthcare tasks. Under the GDPR and national legislation, this is a general legal basis for processing personal data in healthcare.
Implementation of data protection
Self-monitoring data is processed in accordance with the data protection practices of your wellbeing services county. The wellbeing services county is responsible for ensuring that the data is processed confidentially, securely and only to the extent necessary for arranging care.
You can read more about the data protection practices of your wellbeing services county on the wellbeing services county’s website:
Data protection – pirha.fi (in Finnish)
Data protection – Oma Häme (in Finnish)
Data protection | Wellbeing services county of Central Finland (in Finnish)
Fimlab’s role
Fimlab provides wellbeing services counties with the Self-Monitoring Service related to diabetes devices and, in this connection, is responsible for the implementation of technical interfaces between diabetes device cloud services and the patient information system. For this reason, Fimlab acts as a processor of self-monitoring data, processing self-monitoring data on behalf of the data controller (the wellbeing services county).
The technical interfaces enable the self-monitoring data you share to be transferred automatically from the cloud service to the patient information system, so healthcare professionals do not need to manually enter your self-monitoring data from the cloud service into the patient information system.
