Both the prosecutor and the former CEO of psychotherapy firm Vastaamo, Ville Tapio, have appealed against the April verdict of the Helsinki District Court.
The court sentenced the therapy firm's former CEO to a three-month suspended prison sentence for a data protection crime in April.
According to the district court, Tapio committed a data protection offence when he failed to implement the General Data Protection Regulation (GDPR) requirements of pseudonymisation and encryption of patient data.
Tapio previously told Yle at the time that he was likely to appeal against his conviction. In his view, the cause of the massive data breach lies with his former subordinates.
Deputy Chief District Prosecutor Pasi Vainio also said that the prosecutors were considering filing an appeal to the court.
The police also suspected former IT employees of data protection offences, but the prosecution did not press charges against them.
News of the data breach first surfaced in October 2020, when the company announced that sensitive patient data was leaked after a hack of its database. Roughly 25,000 people filed criminal reports to police in connection to the database hack.
In late February, a man authorities suspect was behind the Vastaamo breach, Aleksanteri Kivimäki, was remanded into custody.
Kivimäki is suspected of aggravated extortion, aggravated data theft and aggravated distribution of information infringing privacy, among other offences.
Would you like a roundup of the week's top stories in your inbox every Thursday? Then sign up to receive our weekly email!