No, Finland does not have standalone national legislation specifically governing the use of artificial intelligence. However, Finland is in the process of adopting national measures to supplement the EU AI Act.

The national implementation of the AI Act is being carried out in two phases. In the first phase, the authorities responsible for supervising compliance with the AI Act were designated. The first set of national measures entered into force on 1 January 2026.

These measures include the adoption of a new Act on the Supervision of Certain Artificial Intelligence Systems (Fi. laki eräiden tekoälyjärjestelmien valvonnasta) as well as amendments to the Act on the Enforcement of Fines (Fi. laki sakon täytäntöönpanosta), the Act on the Market Surveillance of Certain Products (Fi. laki eräiden tuotteiden markkinavalvonnasta), the Act on the Financial Supervisory Authority (Fi. laki Finanssivalvonnasta) and the Act on the Energy Authority (Fi. laki Energiavirastosta). 

The second phase involves adopting national provisions to implement the remaining parts of the AI Act. This phase is expected to cover, among other things, the registration of high-risk AI systems related to critical infrastructure at the national level, and the establishment of at least one regulatory sandbox. A regulatory sandbox means a supervised testing environment designed to foster innovation and support the development, testing, and validation of AI systems prior to their market placement or deployment. The current estimated timing for the government proposal to be presented to the Finnish Parliament is week 35/2026.

The AI Act applies a risk-based approach, classifying AI systems into four categories: unacceptable risk (prohibited), high risk, limited risk, and minimal risk. Most of the AI Act addresses high-risk AI systems, while low-risk AI systems are subject to lighter transparency obligations (such as ensuring that end-users are aware that they are interacting with AI), and minimal risk systems remain unregulated.

The AI Act aims to support innovation and include some key elements to strike a balance between innovation and regulation, such as:

1. AI regulatory sandboxes foster innovation by providing a controlled environment where developers can develop, train, test, and validate new AI systems before they are placed on the market or put into service.
2. The AI Act recognises the value of open source in driving innovation and includes certain exemptions for developers of AI systems released under free and open-source licences.
3. AI systems developed and used solely for scientific research and development are excluded from the scope of the AI Act. Additionally, for product-oriented research, the Act does not apply to AI systems until they are placed on the market or put into service.

The supervision of the AI Act in Finland is divided among several authorities. 

The Office of the Data Protection Ombudsman has responsibility for supervising prohibited AI practices, alongside its other supervisory tasks.

Finnish Transport and Communications Agency ("Traficom") supervises compliance with the transparency obligations (Art. 50 of the AI Act). Traficom also serves as the central point of contact, responsible for coordinating with other national authorities and liaising with EU cooperation bodies. The Sanctions Board operating in connection with Traficom is responsible for imposing administrative fines upon proposal by the competent authority.

In addition, several sector-specific authorities act as competent authorities within their respective fields; these include:

• Finnish Safety and Chemicals Agency (Tukes)
• Customs 
• Finnish Supervisory Agency 
• Finnish Medicines Agency 
• Finnish Energy Authority
• Financial Supervisory Authority