New cybersecurity related legislation in Finland
The Act on the Protection of Infrastructure Critical to Society and on the Improvement of Resilience took effect on 1 July 2025 in Finland. The new legislation imposes requirements on all entities providing services critical to society according to an EU directive. The legislation aims to reinforce national security and societal resilience amid the evolving security threat landscape in the wake of the Russian invasion of Ukraine.
The Finnish Ministry of the Interior will cooperate with other ministries to identify essential entities in Finland and at the same time renew the national security assessment according to the new legislation. The industried deemed essential include: infrastructure, health, drinking water, wastewater management, digital infrastructure, public administration, space, and the food industry including processing and distribution.