Finland: Technology

Few questions in data protection law carry as much practical weight as this one: when does data stop being personal data? The answer determines whether the GDPR applies at all and with it, whether individuals hold rights of access; whether data can be shared with third parties or transferred outside the EU without GDPR safeguards; and what is permissible in AI development. In short, the boundary between personal data and non-personal data is the watershed of data protection law.

Patents are of pivotal importance for protecting innovations throughout the quantum industry. When it comes to technology, three areas stand out as particularly significant. Quantum computing encompasses the development of hardware, software, and algorithms that harness quantum mechanical phenomena to perform calculations beyond the reach of classical computers. Quantum communication covers technologies that use quantum principles, most notably quantum key distribution to transmit information with a level of security that classical encryption cannot match.

The EU AI Act has been in force since August 2024, but the ink was barely dry before the European Commission proposed changes to it. In November 2025, the Commission published the Digital Omnibus proposal — a package of targeted amendments aimed at simplifying and clarifying the AI Act, alongside broader adjustments to several pieces of EU digital legislation, including the GDPR and Data Act. The proposal came as a response to concerns about legal uncertainty and the practical challenges businesses face in preparing for the new digital legislation.