AI Regulation Tracker / Legislation in force
Finland Turns On National AI Act Supervision, Names Traficom as Its EU Contact Point
Finnish laws giving national authorities the power to supervise the EU AI Act took effect on January 1, 2026. Companies running AI in Finland now answer to named sector regulators, with Traficom coordinating.
Finland has moved from planning to live enforcement. On January 1, 2026, the national laws that set out the powers of the authorities supervising the EU AI Act entered into force, according to the Finnish Government. The practical effect is that companies running AI systems in Finland now face named national supervisors rather than an abstract European framework.
A decentralized model, not a single AI regulator
Finland chose not to build one central AI agency. Instead, it spread supervision across the sector authorities that already carry out market surveillance. Under this approach, a regulator that already oversees safety and compliance in its field now also supervises AI systems used in that field. As reported by the Finnish Government (tem.fi), the sector authorities being given these powers include the Energy Authority, Traficom, and the Finnish Medicines Agency, each acting within its existing domain.
Traficom, the Transport and Communications Agency, takes the coordinating role. It is described in the reporting as the body that coordinates national supervision and serves as Finland's single point of contact toward the European Union. For a business, that means one national authority is the reference point for cross-authority coordination, even though day-to-day supervision may sit with a different sector regulator.
The government's announcement confirms the structure at a high level. It states that the acts regulating the powers of national authorities supervising the provisions of the EU AI Act entered into force on January 1, 2026, and it distinguishes between market-surveillance authorities that monitor product safety and authorities that guard fundamental rights.
That second category matters for professionals outside classic product sectors. The government frames a separate track of authorities charged with ensuring that AI systems covered by the Act do not harm fundamental rights. In practice, a Finnish firm could face one line of supervision on product safety and another on rights impact, depending on how its AI is used. The coordinating role is what keeps that from becoming a free-for-all: Traficom is positioned to route questions and act as the consistent EU-facing contact.
What it does not do
This step does not create new substantive AI obligations. The duties themselves come from the EU AI Act and apply on the phased EU timetable. What Finland has done is switch on the national machinery to supervise and, where the AI Act allows, enforce those duties. It also does not centralize supervision. A firm active in more than one regulated sector may deal with more than one Finnish authority, with Traficom coordinating.
A note on precision. The exact titles and numbers of the Finnish acts are attributed here to Finnish Government reporting rather than to a statute text this desk has read line by line. Firms citing a specific act number in their own compliance records should confirm it against the Finnish legislative database or the parliamentary response linked from the government announcement.
The Nordic picture and the cross-border angle
Finland is out in front. The reporting indicates that Denmark and Sweden are still firming up their own supervisory designations, which makes Finland an early template for how a Nordic member state builds out AI Act enforcement through existing regulators rather than a new agency.
For a US reader, the direct legal reach is limited to activity in Finland. The AI Act binds providers and deployers based on where AI systems are placed on the market or used, not on the nationality of the company. A US firm operating AI in Finland now has identifiable Finnish supervisors and a named coordinating contact. More broadly, Finland's decentralized choice previews a pattern worth watching as other member states, and eventually other Nordic neighbors, decide whether to concentrate AI supervision or distribute it across sector regulators.
What to do now
The immediate task for any firm with Finnish operations is mapping. Identify each AI system in use or offered in Finland, determine which sector market-surveillance authority now supervises it, and record Traficom as the coordinating point of contact. That mapping is the foundation for responding to any future inquiry, and it converts a governance change into a concrete compliance record. It also surfaces gaps early, such as an AI use that sits across two sector authorities or one that touches the fundamental-rights track, so those questions get raised before a regulator raises them.
Frequently Asked Questions
What changed in Finland on January 1, 2026?
National laws setting the powers of the authorities that supervise the EU AI Act took effect. Finland now supervises AI through existing sector market-surveillance authorities, with Traficom coordinating and acting as the EU single point of contact, according to the Finnish Government.
Who is affected?
Providers and deployers of AI systems operating in Finland, especially in regulated sectors such as energy, transport and communications, and medicines, where the relevant sector authority now supervises AI use.
Did this create new AI obligations?
No. The substantive duties come from the EU AI Act on its phased timetable. Finland activated the national authorities and powers to supervise and enforce those duties, rather than adding new ones.
Are Denmark and Sweden doing the same?
Not yet. As reported, Denmark and Sweden are still firming up their supervisory designations, which makes Finland an early Nordic template for distributed AI Act enforcement.
Sponsored Training
Browse the full AI Regulation News tracker
Informational analysis for working professionals, not legal advice. Confirm how any rule applies to your situation with qualified counsel.