Regulation on corporate subscribers to be reviewed for relevance and appropriateness

The Ministry of Transport and Communications has set up a project to prepare an assessment memorandum on national extensions to the Directive on Privacy and Electronic Communications. The review will focus especially on national data protection regulation concerning corporate subscribers.

A corporate subscriber is a company or other organisation that subscribes to a communications or value-added service and processes users’ messages, traffic data or location data in its communications network. Employers often act as corporate subscribers.

The project aims to produce assessments and alternative measures for developing national regulation. Special attention will be paid to organisations’ ability to ensure information security and protect their data.

The project is related to the comprehensive reform of data protection legislation included in the Government Programme. It is also linked to the decision made in the spring 2025 government spending limits session to examine the need for amendments to the Act on the Protection of Privacy in Working Life and explore the possibility of repealing the extra regulation in place in Finland, which creates an administrative burden. Given the links between corporate subscriber regulation and the Act on the Protection of Privacy in Working Life, the assessment produced by the project also supports these objectives.

What’s next?

Stakeholders will be consulted during the project. The intention is to submit a draft assessment memorandum for public consultation in autumn 2026. The memorandum is due to be completed and published by the end of 2026. 

Inquiries:

Marko Priiki, Senior Specialist, tel. +358 295 342 535, [email protected] (available on Mondays)
Pauliina Penttilä, Senior Specialist, tel. +358 295 342 221, [email protected]
Veikko Vauhkonen, Senior Specialist, Legal Affairs, tel. +358 295 342 168, [email protected]