Finland
Current Status: Implemented
Expected or actual implementation date or timeline
Act 310/2025 (Act on the protection of society’s critical infrastructure and on strengthening societal resilience) entered into force on 1 July 2025.
If implemented, whether a transition period applies and, if so, its duration
The national strategy and national risk assessment to be adopted by 17 January 2026 (still under preparation, not yet published); the first designation decisions identifying critical entities are to be issued by 17 July 2026; and the first national summary report to the Commission to be submitted by 17 July 2028.
Each designated critical entity must complete its first risk assessment within 9 months of receiving its designation decision and submit a resilience plan within 1 year after completing that risk assessment.
Other important remarks/notes
The national strategy is being prepared by the Ministry of the Interior and is expected to be approved by Government in spring 2026.
Critical entities are identified sector by sector, with each sector's responsible ministry making the designation decisions.
Key contact
© Eversheds Sutherland. All rights reserved. Eversheds Sutherland is a global provider of legal and other services operating through various separate and distinct legal entities. Eversheds Sutherland is the name and brand under which the members of Eversheds Sutherland Limited (Eversheds Sutherland (International) LLP and Eversheds Sutherland (US) LLP) and their respective controlled, managed and affiliated firms and the members of Eversheds Sutherland (Europe) Limited (each an "Eversheds Sutherland Entity" and together the "Eversheds Sutherland Entities") provide legal or other services to clients around the world. Eversheds Sutherland Entities are constituted and regulated in accordance with relevant local regulatory and legal requirements and operate in accordance with their locally registered names. The use of the name Eversheds Sutherland, is for description purposes only and does not imply that the Eversheds Sutherland Entities are in a partnership or are part of a global LLP. The responsibility for the provision of services to the client is defined in the terms of engagement between the instructed firm and the client.
Connect with us
