Finland

Status

Consultation phase; the draft of the government proposal has been published for comments. The government proposal is expected to be given in September 2025.

Name of Competent Authority/Data Coordinator

The Finnish Transport and Communications Agency (‘Traficom’) has been named as the data coordinator. Other competent authorities include the Finnish Consumer Ombudsman and the Finnish Competition and Consumer Authority. The competent authorities must cooperate with the Data Protection Ombudsman and other relevant authorities when carrying out their duties under the Data Act and the Finnish implementing act.

What is the maximum penalty?

The maximum amount of an administrative fine to a legal person is 4 % of the company’s EU-wide turnover from the preceding financial year. This is in line with GDPR related fines as well as certain consumer protection related fines. 

Have any deviating/additional rules or laws been adopted that utilize the room for policy within the Data Act?

N/A