Crawls the web, in Finland

Tekijanoikeuslaki, Finland Copyright Act, 49 sec · Read the law's page

• Do not reproduce or make available to the public the whole, or a qualitatively or quantitatively substantial part, of a list, database, or similarly compiled work made by another with substantial investment, without the maker's authorization, for 15 years from completion or first publication, under Tekijanoikeuslaki 49 sec.

Rikoslaki (39/1889) 38 luku 8-8a sec, as amended by 10.4.2015/368 · Read the law's page

• Do not gain access to a computer system, or a separately protected part of one, by using an access code that does not belong to you or by otherwise breaking a protective measure, and do not obtain data from such a system without hacking into it by a special technical device, by bypassing a protective arrangement, by exploiting a vulnerability or by other clearly fraudulent means, under Rikoslaki 38 luku 8 sec.
• Reading a public, unauthenticated page without defeating any access control has not itself been established as a computer break-in under this section.

Tietosuojalaki 1050/2018 (amendments up to 380/2026 included) · Read the law's page

• Establish a GDPR Article 6 lawful basis before processing personal data of a person in Finland, including data collected by crawling.
• Treat consent given by a child of at least 13 years as valid for an information society service offered directly to that child, under Data Protection Act Section 5.

Tekijanoikeuslaki, Finland Copyright Act, 13 b sec, as amended by 3.3.2023/263 · Read the law's page

• Honor an author's express and appropriate reservation of the text-and-data-mining reproduction right before reproducing their work for that purpose under Tekijanoikeuslaki 13 b sec (1 mom.), unless you are a research organization or cultural heritage institution mining for scientific research under 13 b sec (2 mom.), which cannot be overridden by contract or technical measures.

Laki eraiden tekoalyjarjestelmien valvonnasta (1377/2025) · Read the law's page

• If you are a provider or a representative established in Finland, keep the documents referred to in Article 18(1) of the AI Act available to the market surveillance authorities and the notifying authorities for ten years after a high-risk AI system is placed on the market or put into service, even through liquidation, bankruptcy, or the business ceasing or being transferred (Section 26).

Hallituksen esitys HE 190/2026 vp, laki tuotevastuulain muuttamisesta · Read the law's page

• If you develop, make or produce software, including software supplied through a cloud or as a service, you answer as its manufacturer; free and open-source software developed or supplied outside commercial activity is outside the Act (Secs. 1 a and 2 point 5).
• Keep supplying the software updates and upgrades needed to keep the product safe while it is under your control: a lack of safety caused by software, an update or upgrade, a related service, a missing necessary update or a substantial modification is not excused because it arose after you put the product on the market (Sec. 7).
• Meet the mandatory product-safety requirements that apply to your product, because a product that fails them is presumed to lack safety (Sec. 4 b).
• Be ready to produce the evidence a court orders disclosed and to present it, on a party's request, in an easily accessible and understandable form, because failing to comply with a disclosure order presumes the product defective (Secs. 4 b and 13 b).
• If you are established outside the European Union, your importer, your authorized representative or, if there is neither, your fulfilment service provider answers beside you (Sec. 5).
• If you distribute a product or run an online platform that lets consumers conclude distance contracts, you answer when no liable operator can be identified or established in the Union, unless you name one within a month of the request (Sec. 6).
• Be ready to show that the objective state of scientific and technical knowledge when you placed the product on the market, or while it was under your control, did not allow the lack of safety to be detected (Sec. 7).
• Count the destruction or corruption of data used exclusively for personal purposes as compensable economic loss, with no lower limit for property damage (Sec. 8).
• A claim must be brought within three years of the injured person learning, or having reason to learn, of the damage, the lack of safety and the liable person, and within ten years of the product being placed on the market or put into use, or 25 years for latent personal injury (Sec. 9).