Over two decades Finland has had a national information strategy within the area of healthcare, which has created the basic principles how safe information management, information share and capacity building of healthcare staff should be realised, for instance. The renovation of social and healthcare services will constitute a coherent system that increases equality in access to services, and will give citizen's freedom of choosing services. The developments of cloud computing, Internet of things (IoT) and other digitalised health applications is fast-paced and the amount of personal data is growing. The legislation has not kept up with the technology, leaving significant gaps in privacy and data protection. This means that development of data security and privacy protection is lagging behind digitization.