Ensuring data security
We want to be worthy of our customers' trust by ensuring strong strong data security.
34 000 000
blocked scam calls (2021–2025).
Between 2021 and 2025, we blocked a total of up to 34 million scam calls. DNA works continuously and proactively to combat scams together with other operators and Traficom. We want to be worthy of our customers’ trust by working towards strong information security and data protection.
80 %
consider information security to be important.*
Among Finns who responded to the Digital Life survey, 80% consider taking care of information security to be important. We think that this figure should be 100%, which is why we share knowledge on the topic.
Why is dependable data security and private absolutely essential for DNA?
Privacy and data security go hand in hand. Only by securing our own operations can we guarantee reliable services for our customers as well. DNA wants to be a responsible and security-conscious service provider, and we are continually working to improve our data security culture.
Excellent data security is a basic prerequisite for our operations and maintaining a good data security culture is essential to us at DNA. DNA's goal in terms of data security is to protect the critical prerequisites for our success, that is, our customers, personnel, reputation, trademark and brand image and quality of services.
How our work is governed
DNA maintains a high level of security and data protection and a stringent security culture in the processing of all data related to our operations.
Our work is governed by
- Laws and regulations
- Security and Privacy policy and internal guidelines
- DNA’s Code of Ethics for the use of artificial intelligence
- Best practices
We are also constantly training our personnel. We hold several trainings, some of which are shared by Telenor Group employees and others targeted specifically for DNA. Some trainings are mandatory for everyone, while others are additional courses for our experts in various tasks.
Our goals
Our goal is to maintain the continuous development of our level of security and increase security expertise both within DNA and among our key partners.
Targets
DNA measures its success as a trusted steward of secure data by how effectively it keeps its personnel aware of their information security responsibilities as part of DNA. Each year, DNA provides and refreshes role‑appropriate information security training for designated employee groups. In 2025, DNA also succeeded in this task by training all employees in the basics of information security as part of a review of the Code of Conduct, while at the same time delivering more in‑depth, higher‑requirement training for specialist experts.
What does Safe and secure services mean in practice?
DNA’s approach to Safe and secure services is built on four mutually reinforcing pillars:
Secure networks and services
DNA’s networks and services are designed so that security is a fundamental consideration already at the development stage. Strong information security supports the reliable availability of systems and the quality of services in all situations.
Data protection and privacy
We respect the privacy of our customers and employees in all processing of personal data. We comply with applicable laws, regulatory requirements and best practices, as well as the policies of both Telenor and DNA.
Proactive risk management
Information security and data protection risks are an integral part of DNA’s overall risk management. Risks are continuously identified, assessed and managed as part of normal management and decision‑making processes.
Competence and awareness
Secure data use is not achieved through technical solutions alone. At DNA, we invest in employee competence, awareness and a shared security culture, where everyone plays a role in building a safe digital everyday life.
Recent achievements
DNA helped clients tackle scam calls and phishing
Since early 2020, the number of scam calls and messages rose sharply in Finland. As a telecommunication operator we feel that we have a specific responsibility to inform our customers what to do should they receive them.
Some scam messages also appeared to have been sent by DNA, so we wanted to remind our customers of the fact that DNA never asks the customers to fill in missing personal data. The scam email sent in DNA’s name could also be identified as a scam because the sender’s email address was not DNA’s. Some messages asked the receiver to open a message they could listen to. We have also organised mandatory training for our personnel on topics such as identification of scam messages.
DNA works in active cooperation with other operators as well as the Finnish Communications Regulatory Authority to enable detection of scam calls before they reach our customers.
Read more in Finnish: https://www.dna.fi/blogi/-/blogs/pelkaatko-vastata-puhelimeen-huijarien-vuoksi-nain-varaudut-huijauspuheluihin-
Mobile ID makes authentication more secure
The “Mobiilivarmenne” mobile ID is an authentication method developed by the Finnish operators DNA, Elisa and Telia. It is a domestic alternative for identification by means other than bank or social network IDs. Reliability is a key benefit of the method, because the mobile ID is not linked to the user’s bank accounts or user profiles. Mobile authentication meets the needs of our digital society and effectively protects the user’s personal data from phishing.
Authentication with the mobile ID is based on the user’s phone number and facial recognition, fingerprint or PIN code. The mobile ID can be used as an authentication method for electronic signatures, communicating with the authorities or starting a business.
The renewed authentication method was piloted in the operators’ own services during 2020 and customers can avail of it in 2021.
Read more in Finnish: https://www.dna.fi/mobiilivarmenne
Tietosuojasta huolehtiminen on osa perusarkea
Jokaisen digipalveluiden käyttäjän on hyvä tuntea sähköisten palveluiden tietosuojan perusteet. Kerromme mielellämme siitä, kuinka jokainen voi hallita itsestään ja omista palveluiden käyttötavoistaan tallentuvia tietoja sekä huolehtia siitä, etteivät tietojen kalastelijat pääse murtautumaan omiin palveluihin.
DNA:n keräämät tiedot ja niiden hallinta
Kerromme mielellämme mitä tietoja sinusta keräämme, mihin tarkoituksiin niitä käytämme, ja miten voit itse niitä tietoja hallita.
Evästeet
Eväste eli cookie on anonyymi tunniste, joiden avulla voimme kerätä tietoa esimerkiksi siitä, miten, milloin ja millä selaimella palveluitamme käytetään ja minkä tuotteiden tietoja klikataan eniten.
Asiakasviestintä ja markkinointikäytäntö
Haluamme palvella asiakkaitamme monipuolisesti ja yksilöllisesti myös digitaalisissa kanavissa.
Privacy of a business customer and a user of a business service
Data of business customers is collected for example to deliver and maintain DNA's services to the company. A user of business services is a person, whom the business customer has named as a user of the services delivered by DNA. DNA collects the user data that the business customer provides to DNA. This data can include for example, information about whether the user is a contact person to DNA.