The laws implementing the Data Act have been confirmed on 5 December 2025. They will enter into force on 1 January 2026.
The Finnish Transport and Communications Agency (‘Traficom’) has been named as the data coordinator. Other competent authorities include the Finnish Consumer Ombudsman and the Finnish Competition and Consumer Authority. The competent authorities must cooperate with the Data Protection Ombudsman and other relevant authorities when carrying out their duties under the Data Act and the Finnish implementing act.
The maximum penalty to a legal person is 4 % (or 2 %, depending on the breach) of the company’s EU-wide turnover from the preceding financial year. For natural persons, the maximum penalty is 4 % or 2 % (depending on the breach) of the total amount of taxable earned income and capital income according to the most recent tax assessment, however not more than 4000 euros or 2000 euros, depending on the breach.
N/A
