Päivi Korpisaari is Professor in Communication Law at the University of Helsinki, Faculty of Law. She was a member of a working group set up by the Ministry of Justice that prepared the Finnish personal data protection regulation to fit the GDPR. For correspondence: <mailto:paivi.korpisaari@helsinki.fi>.