Consultation process: Legislative amendments to improve the exchange of information between authorities in information security breaches

The Ministry of Transport and Communications requests opinions on the draft government proposal amending the Act on Electronic Communications Services, the Act on the Processing of Personal Data in the Defence Forces and the Act on the Processing of Personal Data by the Police.

The proposed amendments would facilitate a smoother exchange of information between the authorities in significant breaches of information security that have or threaten to have serious adverse effects on national security, national defence, international relations, the decision-making capacity of the public authorities, the critical infrastructure of society or public order and security.

Proposals would improve the security of society

The proposal would improve the safety and security as well as the information security in society. This could be achieved by improving the capacity of the authorities to investigate breaches of information security that may, in serious cases, adversely affect a wide range of critical functions in society.

The proposal extends the possibilities for providing official assistance between authorities in breaches of data security. In terms of the Transport and Communications Agency Traficom, the decision-making process in the administrative assistance procedure would be eased. It is also proposed that communications providers have the right to voluntarily disclose information to Traficom with regard to information security breaches in order to investigate and prevent them.

The draft government proposal now circulated for comments is based on the government resolution adopted in summer 2021 on improving information security and data protection in critical sectors of society.

The proposal relates to the work launched in spring 2022 by the Ministry of the Interior and the Ministry of Defence, which assesses more extensively the cross-administrative capacity of the authorities in ensuring cyber security and cyber defence and in combating cyber crime. The stakeholders will prepare and coordinate the projects in close cooperation.

What's next?

The deadline for comments on the draft proposal is 26 July 2022. All organisations and private individuals may submit comments at www.lausuntopalvelu.fi. Following the consultation round, the preparations will continue at the Ministry.

The aim is that the amendments will enter into force on 1 February 2023.

Inquiries:

Outi Slant, Senior Specialist, tel. +358 50 477 9298, [email protected]

Maija Ahokas, Director of Unit, tel. +358 40 031 6178, [email protected]