Information security laws

Relevant legislation

Information management and IT service use are governed by several laws and regulations, which also address the possible consequences of abuse.  

Key laws concerning  universities, their employees and students:

 

• Archives Act (831/1994, in Finnish only)
• Administrative Procedure Act (434/2003)
• Personal Data Act (523/1999)
• Act on the Openness of Government Activities (621/1999)
• Act on the Protection of Privacy in Working Life (759/2004, e.g. Chapter 6)
• Criminal Code (39/1889, Chapter 35: sections 1, 2; Chapter 38: section 2, Chapter 38: sections 3−4; Chapter 38: section 8)
• Constitution of Finland (731/1999, sections 10–12)
• Act on the Protection of Privacy in Electronic Communications (516/2004)
• Copyright Act (404/1961)
• Universities Act (558/2009 e.g. Chapter 5: section 45; Chapter 10: section 85)
• Tort Liability Act (412/1974, Chapter 4; Chapter 5: sections 5-6; Chapter 6)
• Employment Contracts act (55/2001, Chapter 7: sections 1-2; Chapter 8:section 1)
• Additional key laws concerning upper secondary-level educational institutes, their employees and students and adult education institutes, their employees and students:
• Vocational Education Act (630/1998, in Finnish, e.g. Chapter 5: section 35; Chapter 6: section 44)