Finland’s legislation designating national AI Act supervisory authorities and granting powers to impose penalties entered into force on 1 January 2026. The Finnish Transport and Communications Agency (Traficom) acts as the single point of contact with the EU. A new Sanctions Board connected to Traficom holds authority to impose fines exceeding EUR 300,000. Several sector-specific authorities share responsibility for AI supervision in their respective domains.
A second implementation phase — covering regulatory sandboxes and a national register for high-risk AI systems related to critical infrastructure — is due by August 2026.
Who it affects: Providers and deployers of AI systems operating in the Finnish market, including organisations in education, employment, law enforcement, and critical infrastructure.
What is notably missing: Article 4 of the EU AI Act requires providers to ensure staff have “sufficient AI literacy” but sets no minimum standard. Finland’s national supervision legislation addresses governance and enforcement structures but does not add a domestic AI literacy standard beyond the EU baseline.