Finnish privacy regulator fines Plastic Surgery Center Helsinki for withholding patient records

The Finnish Office of the Data Protection Ombudsman issued a notice that Plastic Surgery Center Helsinki must pay a sanction after the clinic refused to hand over a patient’s medical files. The individual had sought the records over several years, from 2016 through 2025, to file a grievance concerning perceived mistakes in their procedure and to seek compensation. In June, the regulator gave the clinic a two-month window to comply, but the requested information was never delivered.

The Ombudsman’s office determined the clinic deliberately disregarded the mandate and highlighted that the business has not attempted to lessen or rectify any damage suffered by the patient. The ruling is not yet final. The clinic has also been linked publicly to the death of social-media influencer Olivia Oraksen, though that matter is separate from the data-protection case.