Taking data protection and information security into account is part of responsible operations at Varma
Data protection means that privacy protection is ensured when processing personal data. Through data protection, we ensure the confidentiality of data, protect personal data from harmful use and prevent unauthorised disclosure of personal data.
Information security includes all administrative measures and technical solutions with which we protect personal data and other confidential data. Through information security, we ensure that data can only be accessed by those who have the right to do so, when they need the data and that data is in the correct format and that it has not been altered.
Varma’s operations are regulated by the EU’s General Data Protection Regulation (GDPR), which is complemented by the national Data Protection Act. Further regulations on information security are included, for example, in the Act on the Openness of Government Activities and legislation concerning earnings-related pension.