Government bills11
- HE 179/2025 vpPassed with amendments
Improving cybersecurity for smart devices
Mandatory minimum cybersecurity requirements will be set for hardware and software connectable to the internet or other devices. Manufacturers must ensure security updates for their products and remediate vulnerabilities throughout the product's life cycle.
15 May 2026 · passed without a vote - HE 85/2026 vpIn progress
Reforming authorities' information security assessments
Central government authorities will be obliged to assess the information security and preparedness of their information systems at least as self-assessments. At the same time, assessment procedures will be made more flexible, and domestic manufacturers of security-critical solutions will be enabled to apply for official approval.
8 Sep 2026 · no votes yet - HE 71/2026 vpIn progress
Safety investigations into severe cyber incidents
The Safety Investigation Authority will be granted powers to investigate extremely severe cybersecurity incidents that threaten the functioning of society. At the same time, the Safety Investigation Act will be updated to meet the requirements of the European Union Marine Accident Investigation Directive.
8 Sep 2026 · no votes yet - HE 27/2025 vpPassed with amendments
Extending cybersecurity requirements to critical entities
All organisations identified as critical to the functioning of society will be placed under an obligation to manage cybersecurity risks and report significant information security incidents. The obligations will apply to these entities regardless of their size.
19 Jun 2025 · passed without a vote - HE 57/2024 vpPassed with amendments
Expanding and tightening cybersecurity requirements
Companies and authorities vital to the functioning of society will face stricter obligations to protect themselves against cyber threats and report information security incidents. The reform will improve the resilience of critical services and strengthen cybersecurity across the country.
25 Mar 2025 · passed without a vote - HE 67/2024 vpPassed with amendments
Strengthening financial sector digital resilience
Stricter requirements to prepare for cyber threats and system disruptions will be imposed on financial sector companies and their IT service providers. The Financial Supervisory Authority will supervise compliance with the requirements and may impose penalty payments for non-compliance.
11 Oct 2024 · passed without a vote - HE 243/2022 vpLapsed
Enhancing cooperation on cyber threats
Security authorities would be able to exchange necessary information and provide executive assistance to each other in serious cyberattacks and threat situations. In addition, telecommunications operators and other communications intermediaries would have the right to disclose information on information security breaches on their own initiative to Traficom (the Finnish Transport and Communications Agency).
5 Apr 2023 · no votes - HE 81/2022 vpPassed with amendments
Second supplementary budget for 2022
The second supplementary budget for 2022, amending the central government budget for the current year. The votes mainly concern individual appropriation items and proposals in dissenting opinions from the opposition.
28 Jun 2022 · 60 votes - HE 157/2021 vpPassed
Designating an EU cybersecurity coordination centre
The National Cyber Security Centre at Traficom (the Finnish Transport and Communications Agency) will be designated as Finland's national coordination centre for EU cybersecurity. The centre will bring together companies, researchers and authorities in the sector to cooperate and support them in making use of EU funding and projects.
10 Nov 2021 · passed without a vote - HE 137/2018 vpLapsed
Creating a police reserve for disruptions
A volunteer police reserve will be established in Finland to assist the police during major disruptions and exceptional situations. Reservists may be called up to fixed-term public-service employment by a decision of the Government to support police operations.
18 Apr 2019 · no votes - HE 261/2016 vpPassed with amendments
Strengthening state leadership situational awareness
The duties and rights of access to information of the Government Situation Centre will be laid down in a separate act. Authorities will be required to report security incidents to the Situation Centre so that state leadership always has access to an up-to-date overall picture.
28 Apr 2017 · passed without a vote