Finland's Personal Data Act provides restrictions on the processing, storage and transmission of personal and sensitive information, including personal ID. Under the Law, personal information relating to identity may only be processed, stored and transmitted with the consent of the individual. Personal information cannot generally be transferred outside of Finland unless the country has 'comparable' protections. The policy comprises rules for detection of Finnish Social Security Numbers and DNA sequences. The rules for this policy are: