19 Dec 2022 Finland DPA fines €230k after DSAR complaint reveals employee health data was kept for 20 years