Processes voice recordings, in Finland

Rikoslaki 39/1889, 24 luku 5 § · Read the law's page

• Do not, without right, use a technical device to listen to or record a conversation, speech or other sound arising from private life that is not meant for your knowledge and occurs in a place protected by domestic peace, or secretly listen to or record speech not meant for you or any other outsider in circumstances where the speaker has no reason to assume an outsider hears it (Chapter 24, section 5).

Rikoslaki 39/1889, 38 luku 3 ja 4 § · Read the law's page

• Do not, without right, open a letter or other closed message addressed to another, break a protection to obtain information from an electronically stored message protected from outsiders, or obtain information on the content of a call, telegram, text, image or data transmission being transmitted in a telecommunications network or information system, or on its sending or receipt (Chapter 38, section 3).

Tietoyhteiskuntakaari (917/2014), 136 § · Read the law's page

• Process another party's electronic messages and traffic data only with the consent of a party to the communication or where a law allows it. Your own messages and their traffic data, as a party to the communication, you may process (section 136).
• If you receive or learn of an electronic message, radio communication or traffic data that was not meant for you, do not disclose or use its content, its traffic data or the fact that it exists without the consent of a party to the communication, unless a law provides otherwise (section 136).

Laki Euroopan unionin ja kansallisen oikeuden rikkomisesta ilmoittavien henkilöiden suojelusta 1171/2022, 37 § · Read the law's page

• Enter every report you receive in a case management register or otherwise register it (section 37).
• If a report is made at a personal meeting, draw up minutes of the meeting and give the reporter an opportunity to check and approve them (section 37).
• Record an oral report only with the reporter's consent (section 37).

Regulation (EU) 2024/1689, Arts. 5, 50 — directly applicable in Finland as EU Member State; national enforcement via Act 1377/2025

• Tell users at the outset that they are interacting with an AI when deploying a chatbot or voice-based interaction system.
• Mark AI-generated synthetic audio, image, video and text output in a machine-readable format.

Hallituksen esitys HE 190/2026 vp, laki tuotevastuulain muuttamisesta · Read the law's page

• If you develop, make or produce software, including software supplied through a cloud or as a service, you answer as its manufacturer; free and open-source software developed or supplied outside commercial activity is outside the Act (Secs. 1 a and 2 point 5).
• Keep supplying the software updates and upgrades needed to keep the product safe while it is under your control: a lack of safety caused by software, an update or upgrade, a related service, a missing necessary update or a substantial modification is not excused because it arose after you put the product on the market (Sec. 7).
• Meet the mandatory product-safety requirements that apply to your product, because a product that fails them is presumed to lack safety (Sec. 4 b).
• Be ready to produce the evidence a court orders disclosed and to present it, on a party's request, in an easily accessible and understandable form, because failing to comply with a disclosure order presumes the product defective (Secs. 4 b and 13 b).
• If you are established outside the European Union, your importer, your authorized representative or, if there is neither, your fulfilment service provider answers beside you (Sec. 5).
• If you distribute a product or run an online platform that lets consumers conclude distance contracts, you answer when no liable operator can be identified or established in the Union, unless you name one within a month of the request (Sec. 6).
• Be ready to show that the objective state of scientific and technical knowledge when you placed the product on the market, or while it was under your control, did not allow the lack of safety to be detected (Sec. 7).
• Count the destruction or corruption of data used exclusively for personal purposes as compensable economic loss, with no lower limit for property damage (Sec. 8).
• A claim must be brought within three years of the injured person learning, or having reason to learn, of the damage, the lack of safety and the liable person, and within ten years of the product being placed on the market or put into use, or 25 years for latent personal injury (Sec. 9).