Yes, Finnish law permits recording phone calls under strict conditions. The primary framework is the Personal Data Act (523/1999) and the Electronic Communications Services Act (105/2024), which align with the EU’s GDPR. Consent from at least one party is mandatory, and recordings must not infringe privacy rights. Unauthorized interception or disclosure risks fines up to €10,000 or imprisonment under the Criminal Code (39/1889). Businesses must also comply with the Consumer Protection Act (38/1978) when recording customer interactions.
Key Regulations for Recording Phone Calls in Finland
- Consent Requirement: Explicit consent from at least one party is legally required (Personal Data Act, §12). Passive recording without notice is prohibited.
- Purpose Limitation: Recordings must serve a legitimate interest (e.g., evidence, quality control) and cannot be repurposed without re-consent (GDPR, Art. 5).
- Data Security: Controllers must implement encryption and access controls (Electronic Communications Services Act, §45). Breaches trigger mandatory notifications to the Finnish Data Protection Ombudsman.
The Finnish Communications Regulatory Authority (FICORA) enforces compliance, with 2026 amendments tightening penalties for non-consensual recordings. Businesses must document consent and provide clear privacy notices. Third-party disclosures (e.g., to insurers) require separate contractual agreements. Violations may also trigger civil liability under tort law (Tort Liability Act, 412/1974).