Ships a mobile app, in Finland

Tuotevastuulaki (694/1990) · Read the law's page

• Treat standalone software as an open question under this Act: section 1 defines a product as a movable thing (irtain esine) and extends the product rules to electricity, and the Government's bill HE 190/2026 vp would add software to the definition (Sec. 1).
• If you manufacture or produce a product, import it into the European Economic Area to put it into circulation there, or market it as your own under your name, trade mark or other distinguishing mark, you answer for the damage it causes (Sec. 5(1)).
• If a product does not show its manufacturer, tell the injured person within a reasonable time of a claim or request who is liable under section 5 or who offered the product to you, or you answer as the manufacturer; for an imported product the same applies unless the product shows an importer (Sec. 6).
• Make the product as safe as there is reason to expect, judged on when you put it into circulation, its foreseeable use, its marketing and instructions for use and other circumstances (Sec. 3).
• Be ready to show an exemption: that you did not put the product into circulation in the course of business, that the lack of safety results from mandatory rules issued by an authority, or that the product probably had no lack of safety causing the damage when you put it into circulation; the Act has no development risk exemption (Sec. 7(1) and (2)).
• If you made only a component, be ready to show that the lack of safety results from the design of the product it was connected to or from the instructions of the manufacturer who ordered the product (Sec. 7(3)).
• Do not rely on a contract term made before the damage appears to limit the injured person's compensation under the Act, because it is void (Sec. 10).
• If you import a product into Finland, help the injured person translate the claim into a foreign language or pay the necessary translation costs; a later distributor must name the importer on request within a reasonable time (Sec. 13).
• A claim must be brought within three years of the injured person learning, or having reason to learn, of the damage, the lack of safety and the liable person, and within ten years of the liable person putting the product into circulation (Sec. 9).

Laki digitaalisten palvelujen tarjoamisesta (306/2019), 3 §, 3 luku (7-10 §) ja 4 luku (11-15 §) · Read the law's page

• If you provide a digital service within section 3(1), paragraphs 4 to 6 of the Act, ensure the perceivability and understandability of the content of your website or mobile application and the operability and robustness of its interfaces and navigation, in accordance with the accessibility requirements (s. 7(1)).
• Make the content of your digital service meet the accessibility requirements when it is available to users, and make pre-recorded time-based media meet them within 14 days of its first or repeated publication (s. 7(3)).
• If procurement law applies to your activity, take account of the accessibility requirements when you procure, as the Public Procurement Act (1397/2016) section 71(1) and the Act on Procurement by Entities in the Water, Energy, Transport and Postal Services Sectors (1398/2016) section 75(1) provide (s. 7(4)).
• Maintain an accessibility statement that contains at least an account of the parts of the content that do not meet the requirements and the reasons for departing, instructions for getting the information or service in an alternative way, an electronic contact for accessibility feedback, and a link to the supervisory authority's website for an accessibility complaint or request for clarification (s. 9(1)).
• Keep the statement in the format set by the European Commission's implementing act under Article 7(2) of Directive (EU) 2016/2102, easily available on your website in an accessible form; for a mobile application, make the statement accessible and available on your website or when the application is downloaded (s. 9(2) to (4)).
• Accept accessibility feedback, and requests for clarification of your disproportionate-burden grounds, from anyone at the electronic contact in your statement (s. 10(1)).
• Where a user needs content that does not meet the requirements to establish or exercise interests, rights or obligations, give that content, for a justified reason in an individual case, in a form that meets the requirements or in another way the user can access; the user makes the request to the electronic contact in your statement or to another alternative contact you publish, and if you do not give the content you draw up a written reasoned certificate for the requester (s. 10(2) and (4)).
• Send an electronic acknowledgement of receipt that states the time received, and answer feedback and requests without delay and within two weeks of the contact; you may extend the time by up to two weeks for a request that concerns a wide range of content, and must tell the requester (s. 10(3)).
• Bring the digital service into line with the requirements within a reasonable time when the supervisory authority, the Finnish Transport and Communications Agency (Traficom), orders it, and give a user the content they need in an accessible form within the time it sets when it so orders on the user's clarification request; the authority may back an order under section 12(3) with a conditional fine (ss. 11(2), 12(3) and 14).
• Give the supervisory authority, free of charge and notwithstanding secrecy provisions, the information and explanations it needs to handle a complaint or carry out supervision, in the time and form it orders; allow an inspection on your premises other than premises used for permanent residence, and give the access rights needed to reach services whose use is restricted online (s. 13).
• The accessibility requirements are those in the references to harmonized standards, or parts of them, that the European Commission publishes in the Official Journal of the European Union; the Act itself names no standard (s. 7(1)).
• Depart from the accessibility requirements only if a prior accessibility assessment lets you show that meeting them would impose a disproportionate burden on your activities, taking account of the needs of disabled people and of your size, financial position, and the nature and scale of your operations (s. 8).
• The Act does not apply to workplace intranets and extranets for a limited number of persons, teaching sites and applications used within a limited group for a limited time, public broadcasters' services other than audiovisual access services, live time-based media that is not stored for republication, maps and map services (although the essential guidance content of a navigation map must be offered in another accessible digital form), content you did not produce, finance or control, and heritage collection items that cannot be made accessible (s. 3(3)).
• The duties applied from 23 September 2019 to websites published on or after 23 September 2018, from 23 September 2020 to earlier websites and to pre-recorded time-based media, and from 23 June 2021 to mobile applications (s. 17(1), (2) and (5)); for entities in water and energy supply, transport and postal services and for credit, payment, investment and insurance providers the Act has applied from 1 January 2021 (s. 17(6)); content archived before 23 September 2019 is outside the Act, and office-software files published before 23 September 2018 are within chapter 3 only where they are needed to establish or exercise a party's interests, rights or obligations (s. 17(3) and (4)).

Laki digitaalisten palvelujen tarjoamisesta (306/2019), 3 a luku (10 a-10 g §), ja valtioneuvoston asetus eräiden digitaalisten palvelujen saavutettavuusvaatimuksista (179/2023) · Read the law's page

• If you offer passenger transport, e-book, online shop, consumer credit, investment, payment, basic payment account or electronic money services to consumers through a website or app, or a service that gives access to audiovisual content services or a communications service, make the digital service meet the additional requirements of section 10 c on top of section 7, from 28 June 2025 (ss. 10 a and 10 c(1)). Chapter 3a does not apply to the digital services of a microenterprise, which section 4, paragraph 2 of Act 102/2023 defines as an undertaking that employs fewer than 10 employees and has an annual turnover of at most EUR 2 million or an annual balance sheet total of at most EUR 2 million (s. 10 b).
• Meet chapter 3 as well: keep the accessibility statement of section 9 and handle accessibility feedback and requests for content in an accessible form within two weeks under section 10, which the government bill treats as part of the Directive's support-services requirement (ss. 9, 10 and 10 f).
• Give information on how the digital service works, and where it needs a particular product, state in the accessibility statement how the product relates to the service, what accessibility features it has and how it works with assistive devices (s. 10 c(3); Decree 179/2023 s. 2).
• Keep the information on consumer credit, investment, payment and banking services understandable, at no more than level B2 of the Common European Framework of Reference for Languages (s. 10 c(3); Decree 179/2023 s. 3).
• Make an e-book accessible so that it can be processed, read, used and navigated, with synchronized text and audio where it has both, files that do not stop assistive technology from working, access and navigation as the user chooses, alternative presentations, accessibility metadata and digital rights management that does not block the accessibility features (s. 10 c(3); Decree 179/2023 s. 4).
• Give information on the accessibility of the products and services in your online shop when the economic operator responsible for them has supplied that information to you (Decree 179/2023 s. 5).
• Where you rely on an alternative, equally accessible way of using the service instead of the requirements, meet the ten functional performance requirements of the Decree (s. 10 c(4); Decree 179/2023 s. 6).
• If you provide communications services or services that give access to audiovisual content services, meet the additional requirements in sections 194 c and 194 d of the Act on Electronic Communications Services (917/2014) (s. 10 c(5)).
• If you depart from the requirements, notify the supervisory authority, document the assessment, submit it on request and keep it for five years from when you last offered the digital service, and make the assessment again when the content changes, when the authority asks and at least every five years (s. 10 e).
• Publish in the accessibility statement that section 9 requires, in addition to its contents, a general description of the digital service and an account of how it meets the additional requirements of the Directive (s. 10 f).
• Notify the supervisory authority of any shortcomings in the accessibility of the digital service and of the corrective measures (s. 10 g).
• Bring the digital service into line within a reasonable time when Traficom orders it, and give Traficom the information it needs free of charge and access to your premises for an inspection; Traficom may back the order, the information duty and the inspection with a conditional fine (ss. 12(3), 13 and 14).
• Follow the harmonized standards or technical specifications that the Directive's Article 15 refers to if you want the digital service treated as meeting the requirements those standards or specifications cover (s. 10 c(2)).
• Depart from the accessibility requirements only if an accessibility assessment lets you show that compliance would impose the disproportionate burden of section 8 or a fundamental change to the basic nature of the service, and do not rely on the burden if you receive funding from outside your own funds that is granted for improving accessibility (s. 10 d).
• The Act does not apply to live time-based media that is not stored for republication, online maps and map services (although the essential guidance content of a navigation map must be offered in another accessible digital form), content you did not produce, finance or control, heritage collection items that cannot be made accessible, or the digital services of a public service broadcaster other than services giving access to audiovisual content services (s. 3(3)).
• Chapter 3a does not apply to website and app content archived before 28 June 2025, to pre-recorded time-based media or office files published before that day, and a service contract made before 28 June 2025 may continue unchanged until it expires, but for no longer than five years from that day (Act 104/2023, transitional provisions; Decree 179/2023 s. 7).

Laki liikenteen palveluista (320/2017), 150 a § · Read the law's page

• If you carry passengers by air, rail, sea, inland waterway or bus under the EU passenger rights regulations, or manage a station, terminal or port those regulations cover, provide, each for your part, the information you hold on the accessibility of the vehicles used, the accessibility of the infrastructure and built environment around the services, assistance for disabled persons, smart ticketing systems, real-time travel information and additional information on use of the service, from 28 June 2025 (s. 150 a(1)).
• Offer that information electronically on your websites and in your mobile applications and meet chapter 3a of the Act on the Provision of Digital Services (306/2019) for it (s. 150 a(2)).
• Correct a breach of the Act when the Finnish Transport and Communications Agency (Traficom) so orders; the order may be backed by a conditional fine, a threat of discontinuation or a threat that the omitted measure is carried out at your expense (s. 255).

Landskapslag (2019:7) om tillgängliga digitala tjänster, 2a kap. (8 a–8 i §), 9 och 11 §, sådana de lyder i landskapslagen 2023:61, och landskapsförordning (2023:71) om tillgänglighetskrav för vissa digitala tjänster · Read the law's page

• If you professionally provide consumers in Åland, within the legislative competence of the Åland Parliament, with a passenger transport service by sea, inland waterway or bus (not urban, suburban or regional transport) or with a service that gives access to audiovisual media services, make your website or app meet the requirements of section 5 and the additional requirements of section 8 b from 28 June 2025, and keep procedures in place so that it stays compliant (ss. 1, 8 a and 8 b).
• Give information on how the service works and on the products used to provide it, and have any support services give information on its accessibility and compatibility with assistive technology through accessible means (s. 8 b).
• Depart from the requirements only where your accessibility assessment shows that meeting them would fundamentally alter the service or impose a disproportionate burden, not if you receive outside funding for improving accessibility; tell the Government of Åland, document the assessment, give it on request, keep it for five years and repeat it when the service changes, on request and at least every five years (ss. 8 c and 8 d).
• Publish, besides your accessibility statement, a general description of the service and how it meets the additional requirements, in written and oral form accessible to persons with disabilities, and keep it for as long as you provide the service (s. 8 e).
• Tell the Government of Åland of any accessibility shortcoming in the service and of the corrective measures (s. 8 f).
• If you operate a passenger transport service or hold a station, terminal or port for it, give on your website and in your app the information you hold on the accessibility of the vehicles, infrastructure and built environment, assistance for persons with disabilities, smart ticketing, real-time travel information and further use of the service (s. 8 g).
• If you provide a service giving access to audiovisual media services, offer accessible electronic programme guides that show the accessibility services, and pass the accessibility services through in full, in adequate quality, synchronized and under the user's control; or offer an alternative mode of operation that meets the ten functional performance requirements of Landskapsförordning 2023:71 and is at least as accessible (ss. 8 h and 8 i; ÅFS 2023:71 ss. 2 and 3).
• Make the service meet chapter 2a within a reasonable time when the Government of Åland orders it; anyone may complain to the Government that you have not observed chapter 2a (ss. 9 and 11).
• Chapter 2a does not apply to services that microenterprises provide; section 2 defines a microenterprise as an enterprise with fewer than ten employees and an annual turnover or annual balance sheet total of at most EUR 2 million (ss. 2 and 8 a).
• Follow the harmonized standards or technical specifications that Article 15 of Directive (EU) 2019/882 refers to if you want the service treated as meeting the requirements they cover (s. 8 b).
• Service contracts made before 28 June 2025 may continue unchanged until they expire, but for no longer than five years from that day, and chapter 2a does not apply to content archived, or to pre-recorded media and office files published, before that day (ÅFS 2023:61, entry into force).

Hallituksen esitys HE 190/2026 vp, laki tuotevastuulain muuttamisesta · Read the law's page

• If you develop, make or produce software, including software supplied through a cloud or as a service, you answer as its manufacturer; free and open-source software developed or supplied outside commercial activity is outside the Act (Secs. 1 a and 2 point 5).
• Keep supplying the software updates and upgrades needed to keep the product safe while it is under your control: a lack of safety caused by software, an update or upgrade, a related service, a missing necessary update or a substantial modification is not excused because it arose after you put the product on the market (Sec. 7).
• Meet the mandatory product-safety requirements that apply to your product, because a product that fails them is presumed to lack safety (Sec. 4 b).
• Be ready to produce the evidence a court orders disclosed and to present it, on a party's request, in an easily accessible and understandable form, because failing to comply with a disclosure order presumes the product defective (Secs. 4 b and 13 b).
• If you are established outside the European Union, your importer, your authorized representative or, if there is neither, your fulfilment service provider answers beside you (Sec. 5).
• If you distribute a product or run an online platform that lets consumers conclude distance contracts, you answer when no liable operator can be identified or established in the Union, unless you name one within a month of the request (Sec. 6).
• Be ready to show that the objective state of scientific and technical knowledge when you placed the product on the market, or while it was under your control, did not allow the lack of safety to be detected (Sec. 7).
• Count the destruction or corruption of data used exclusively for personal purposes as compensable economic loss, with no lower limit for property damage (Sec. 8).
• A claim must be brought within three years of the injured person learning, or having reason to learn, of the damage, the lack of safety and the liable person, and within ten years of the product being placed on the market or put into use, or 25 years for latent personal injury (Sec. 9).