Pursuant to the Act, data that contains identifiers can only be used for secondary purposes without a data permit for knowledge management and regulatory steering and control.
Social welfare and health care service providers have the right to use and collate data that it has saved in the scope of its own activities, if this is necessary for the provision, monitoring, assessment, planning, development, management and own checks of the services for which the service provider is responsible. Even then, the data should be used when possible in a form that does not contain identifiers.
Additionally the supervisory authority has the right to receive data that contains identifiers from the data permit authority for the purposes of steering and supervision of authorities, if it requests these on the basis of the right of access it is provided in another law.  In this case, supervision does not focus on customers by on health and social service professionals or service providers. The aim is for data that is necessary for supervision to be available directly from the data permit authority so there is no need to request them from numerous different parties.