FinlandGDPR Chapter V, Cross-Border Transfer of Personal Data from Finland
Regulation (EU) 2016/679, Arts. 44-50; Tietosuojalaki 1050/2018 sec. 27
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
What follows is LexLint's own research summary of this law, not legal advice.
In force since 1 January 2019.
A cross border transfer rule binding public and private bodies.
As of 24 August 2026.
What it requires
- Rely on a European Commission adequacy decision, Standard Contractual Clauses with a transfer impact assessment, Binding Corporate Rules, or a narrow Article 49 derogation before moving personal data of a person in Finland outside the European Economic Area.
Who checks it
Audit expectation
continuous
Who audits it
Self
Where the report goes
Produced on request
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
Transferring personal data of a person in Finland outside the European Economic Area requires a European Commission adequacy decision, Standard Contractual Clauses, Binding Corporate Rules, or a narrow Article 49 derogation, backed by the Article 83(5) top fine tier.
Section 27 disapplies Articles 44 to 50 for processing performed solely for journalistic, academic, artistic or literary purposes where applying them would infringe freedom of expression or information; outside that narrow exemption no Finland-specific broadening or narrowing of Chapter V was found.
When LexLint raises it
crawls_webtrains_modelsdeploys_chatbot
Read the law
Official Journal text, EUR-Lex, Regulation (EU) 2016/679
Ministry of Justice, Finland, official English translation, Data Protection Act Section 27
Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.