Finland. ePrivacy / marketing. Act
Electronic Communications Services ActAct on Electronic Communications Services (Laki sähköisen viestinnän palveluista) 917/2014
In force
Partly verified
Low confidence.Not verified this session.
§1Summary
- Synopsis
Finland's Act on Electronic Communications Services carries the ePrivacy rules, requiring consent for non-essential cookies (s.205) and opt-in for electronic direct marketing to individuals.
- Key themes
- Unique features
Cookie enforcement sits with Traficom, the telecoms regulator, rather than the DPA.
- SaaS relevance
Any SaaS website, app or product that sets non-essential cookies/SDKs or sends marketing emails/SMS to users in this country needs prior consent (subject to exemptions) under this law, regardless of where the provider is based.
§2Obligations
- Extraterritorial
- Yes
- Breach notification
- Telecom providers: authority notification under Reg 611/2013; otherwise GDPR
- DPO
- No
- Cross-border transfers
- None
- Maximum penalty
- Penalty payments/conditional fines under the Act; GDPR fines
§3Dates
- Key dates
- Adopted
- In force
- Cookie rule in s.205; direct marketing in s.200-202
§4Text and authority
- Text
- Authoritative text finlex.fi
- Authority
- Finnish Transport and Communications Agency (Traficom) for cookies; Data Protection Ombudsman for direct marketing
§5Where it applies
- Domestic law of
- Finland
§6Sources and verification
- Verification
Low confidence.
Partly verified
Low confidence.Not verified this session.