What Finland has done nationally under Regulation (EU) 2024/1689 as amended by Regulation (EU) 2026/1744: the accompanying law, which bodies it has designated as market surveillance authority, single point of contact and notifying authority, its Article 99 penalty regime, whether an Article 57 regulatory sandbox exists (the deadline is 2 August 2027), and any national guidance that reaches courts, law firms or legal-AI deployers. Each row is dated and sourced to the gazette, parliament or authority; titles in the original language are quoted, English titles marked where translated by us.
Act on supervision of certain artificial intelligence systemstranslated
Laki eräiden tekoälyjärjestelmien valvonnasta
Finland’s Act 1377/2025 on supervision of certain AI systems establishes national market-surveillance, notifying, single-point and sanction mechanisms and entered into force on 1 January 2026.
“"Tämä laki tulee voimaan 1 päivänä tammikuuta 2026"”
Designated authorities
Authority designation · 2026-01-01 · designated
Traficom acts as the single point of contacttranslated
Liikenne- ja viestintävirasto toimii keskitettynä yhteyspisteenä
Authority: Liikenne- ja viestintävirasto Traficom — single point of contact, market surveillance authority
The Finnish act designates Traficom as the AI Act Article 70(2) single point of contact and assigns it market-surveillance tasks, including Article 50 transparency supervision within the national framework.
“"Liikenne- ja viestintävirasto toimii tekoälyasetuksen 70 artiklan 2 kohdassa tarkoitettuna keskitettynä yhteyspisteenä"”
Authority designation · 2026-01-01 · designated
Market surveillance authoritiestranslated
Markkinavalvontaviranomaiset
Authority: Tukes, Customs, Traficom, Fimea, Energy Authority, DPO, FIN-FSA and others — market surveillance authority
Finland uses a decentralised market-surveillance model. The act lists sector authorities including Tukes, Customs, Traficom, the supervisory agency, Fimea, Energy Authority, Data Protection Ombudsman and FIN-FSA.
Authorities responsible for notificationtranslated
Ilmoittamisesta vastaavat viranomaiset
Authority: TEM, Traficom, Fimea, Ministry of Social Affairs and Health — notifying authority
The act designates several notifying authorities for conformity-assessment bodies, including the Ministry of Economic Affairs and Employment, Traficom, Fimea and the Ministry of Social Affairs and Health.
“"Ilmoittamisesta vastaava viranomainen vastaa ilmoitettujen laitosten arvioinnista"”
Authority designation · 2026 · designated
Authorities protecting fundamental rights under EU Artificial Intelligence Act
TEM’s AI regulation page lists Finnish Article 77 authorities protecting fundamental rights, including the Data Protection Ombudsman, Non-Discrimination Ombudsman, Ombudsman for Equality, Parliamentary Ombudsman and Consumer Ombudsman.
“"The Finnish authorities protecting fundamental rights under the AI Act"”
Regulatory sandbox (Art. 57)
Regulatory sandbox (Art. 57) · 2026-04-13 · announced
AI regulatory sandboxes
Authority: Traficom and competent authorities — sandbox operator
Traficom’s AI regulatory sandbox page explains the sandbox as a controlled testing environment for AI innovation under competent-authority supervision, implementing the AI Act sandbox concept in Finland.
Traficom describes the AI regulatory sandbox as a controlled experimentation and testing environment under competent-authority supervision.
“"a controlled experimentation and testing environment"”
Penalties (Art. 99)
Penalty regime (Art. 99) · 2026-01-01 · in-force
Sanctions board for supervision of AI systemstranslated
Finland creates a sanctions board connected with Traficom for administrative penalties. The law sets maxima including EUR 35 million/7%, EUR 15 million/3%, and EUR 7.5 million/1% bands.
The act creates a sanctions board and sets maximum administrative penalty levels mirroring AI Act Article 99 bands.