---

title: "Finland Recording Laws: One-Party Consent Rules and Penalties (2026)" meta_description: "Finland allows one-party consent recording under Criminal Code Ch. 24. Learn Finnish wiretapping rules, GDPR requirements, workplace surveillance, and penalties." slug: "world-recording-laws/finland-recording-laws" categories: ["Recording Laws", "International Recording Laws"] keywords: ["finland recording laws", "finnish wiretapping", "suomi nauhoitus laki", "rikoslaki luku 24", "finland one-party consent", "finnish phone recording law", "finland conversation recording", "GDPR recording finland"] lastUpdated: "2026-03-21"

Finland Recording Laws: One-Party Consent Rules and Penalties (2026)

Finland follows a one-party consent framework for recording private conversations. If you participate in a conversation, you may legally record it without informing the other parties. Finnish law does not criminalize recording your own communications, and the Constitution of Finland (Suomen perustuslaki) protects this right under Section 12, which guarantees freedom of expression.

This guide covers the full scope of Finnish recording and wiretapping laws, including the governing statutes under the Criminal Code (Rikoslaki), GDPR obligations enforced by the Finnish Data Protection Ombudsman (Tietosuojavaltuutettu), workplace surveillance rules, public recording rights, criminal penalties, and what businesses need to know about call recording compliance.

Overview of Finnish Recording Laws

Finland has a layered legal framework governing the recording of conversations, telephone calls, and video. Multiple statutes work together to define what is permitted and what crosses into criminal conduct.

The primary criminal provisions governing audio recording fall under Chapter 24 of the Criminal Code of Finland (Rikoslaki 39/1889, as amended). This chapter addresses offenses against privacy, peace, and honor. Section 5 of Chapter 24 specifically defines the crime of eavesdropping (salakuuntelu), while Section 6 covers illicit observation (salakatselu).

For electronic communications, the Act on Electronic Communications Services (917/2014), commonly known as the Information Society Code, provides additional protections for the confidentiality of telecommunications transmitted over Finnish networks.

The General Data Protection Regulation (GDPR), as applied in Finland through the national Data Protection Act (Tietosuojalaki 1050/2018), governs the processing of personal data captured in any recording. The Finnish Data Protection Ombudsman (Tietosuojavaltuutettu) serves as the supervisory authority enforcing GDPR compliance.

Finland is also a party to the European Convention on Human Rights. Finnish courts reference Article 8 ECHR (right to respect for private life) when deciding cases involving recordings and privacy.

The Constitutional Foundation: Sections 10 and 12

The Constitution of Finland (731/1999) provides the foundational framework for recording rights and privacy protections.

Section 10: The Right to Privacy

Section 10 of the Constitution guarantees that everyone's private life, honor, and sanctity of the home are protected. It states that the secrecy of correspondence, telephony, and other confidential communications is inviolable.

However, Section 10 also allows Parliament to pass laws that limit communication secrecy when necessary for investigating crimes that threaten individual or societal security, during court proceedings, during security checks, and during lawful deprivation of liberty.

This constitutional provision establishes a strong baseline of privacy protection while permitting carefully defined exceptions through legislation.

Section 12: Freedom of Expression

Section 12 guarantees everyone the freedom of expression, which includes the right to express, disseminate, and receive information, opinions, and other communications without prior prevention by anyone.

Finnish legal interpretation holds that Section 12 protects a person's right to record their own conversations. Because the Criminal Code does not criminalize participant recording, and the Constitution affirmatively protects the right to communicate and receive information, recording a conversation you participate in is a constitutionally protected activity in Finland.

Criminal Code Chapter 24: Privacy Offenses

Chapter 24 of the Criminal Code (Rikoslaki) is titled "Offenses Against Privacy, Peace, and Honor" (Yksityisyyden, rauhan ja kunnian loukkaamisesta). This chapter contains the core criminal provisions relevant to recording.

Section 5: Eavesdropping (Salakuuntelu)

Section 5 defines eavesdropping as the use of a technical device to unlawfully listen to or record conversation, speech, or other private sounds. The offense applies only to conversations taking place in locations protected by domestic peace (kotirauha) or in other places where the speaker has a reasonable expectation of privacy.

The critical element is that Section 5 targets non-participants. A person who is part of the conversation and uses a device to record it does not commit eavesdropping. The statute protects against secret surveillance by outsiders, not against a participant's decision to preserve a record of their own communication.

Attempted eavesdropping is also punishable under Finnish law.

Penalty: A fine or imprisonment for up to one year.

Section 6: Illicit Observation (Salakatselu)

Section 6 addresses illicit observation, which is the use of a technical device to watch or photograph a person in a location protected by domestic peace, such as homes, hotel rooms, and tents, or in bathrooms, changing rooms, or other private facilities.

Illicit observation covers situations like placing a hidden camera in someone's apartment, filming through a window into a private residence, or installing surveillance equipment in a restroom.

Attempted illicit observation is also punishable.

Penalty: A fine or imprisonment for up to one year.

Section 7: Preparation for Eavesdropping or Illicit Observation

Section 7 criminalizes placing a device for the purpose of committing eavesdropping or illicit observation. This means that installing a hidden microphone or camera with the intent to secretly record carries its own criminal penalty, even before any actual recording occurs.

Penalty: A fine or imprisonment for up to six months.

Section 8: Dissemination of Information Violating Personal Privacy

Section 8 makes it a crime to disseminate information about another person's private life in a way that causes damage, suffering, or contempt. This provision is directly relevant to recording because sharing a lawfully made recording can become criminal if the content reveals private matters and the disclosure causes harm.

Even if you legally recorded a conversation as a participant, publishing or distributing that recording in a way that violates the other person's privacy may constitute an offense under Section 8.

The public prosecutor generally cannot bring charges under Section 8 unless the injured party files a report. An exception exists when the Prosecutor-General determines that prosecution serves a very important public interest.

Penalty: A fine or imprisonment for up to two years.

Section 8a: Aggravated Dissemination

When the dissemination of private information causes particularly significant suffering or damage, the offense is classified as aggravated under Section 8a.

Penalty: A fine or imprisonment for up to three years.

Criminal Code Chapter 38: Communication Offenses

Chapter 38 of the Criminal Code addresses offenses related to information and communication. These provisions protect the secrecy of electronic communications and are relevant to wiretapping and message interception.

Section 3: Message Interception (Viestintasalaisuuden loukkaus)

Section 3 prohibits unlawfully opening a sealed message addressed to another person, hacking to obtain the contents of an electronic message protected from outsiders, or obtaining information about the contents of a telephone call or electronic message not directed to oneself.

This provision targets traditional wiretapping and modern forms of electronic interception. Tapping into another person's phone line, intercepting their emails, or using software to monitor their messaging apps all fall under this section.

Penalty: A fine or imprisonment for up to two years.

Section 4: Aggravated Message Interception

Section 4 applies when the intercepted message has especially confidential content or the act constitutes a grave violation of privacy protection. If the interception is aggravated when assessed as a whole, enhanced penalties apply.

Penalty: Imprisonment for up to three years.

GDPR and the Finnish Data Protection Ombudsman

Recording a conversation captures personal data because a person's voice qualifies as personal data under the GDPR. This means that even where a recording is lawful under criminal law (because you are a participant), you must still comply with GDPR requirements when the recording falls outside purely personal or household use.

Legal Basis for Recording Under GDPR

Article 6(1) of the GDPR requires a valid legal basis before processing personal data. For recording conversations, the most common bases are:

Consent (Article 6(1)(a)): The data subject has given clear, informed, and specific consent to the recording. Under GDPR, consent must be freely given, and the person must be able to withdraw it at any time.

Legitimate interest (Article 6(1)(f)): The recording serves a legitimate interest of the controller (such as quality assurance or dispute resolution), provided this interest does not override the fundamental rights and freedoms of the data subject. A documented balancing test is required.

Legal obligation (Article 6(1)(c)): Certain regulated industries (such as financial services) may be legally required to record communications for compliance purposes.

Transparency Obligations

The Finnish Data Protection Ombudsman has made clear that the conversation partner must always be informed about the collection of personal data, including call recording. The controller must inform the conversation partner about the recording at the start of the call.

A simple mention on a website is not sufficient. The information must reach the person being recorded before the recording begins. This is a strict requirement from the Finnish DPA that goes beyond what many organizations assume.

Secret recordings made without any notice do not comply with GDPR, even when they are technically legal under criminal law. Criminal law allows participant recording without notice, but data protection law requires transparency about data processing.

Data Subject Rights

According to the GDPR, the controller must deliver a copy of a recorded phone call if requested by the data subject under Article 15. The data subject in this context is any individual whose speech the organization recorded.

The Finnish DPA has also emphasized that data subjects have the right to request deletion of their recorded data under Article 17 (the right to erasure), provided no overriding legal basis requires its retention.

Finnish DPA Enforcement

The Tietosuojavaltuutettu has increased enforcement activity in recent years. In 2024, the office imposed administrative fines totaling 2.4 million EUR, the highest annual total to date in Finland. Notable fines included 856,000 EUR and 950,000 EUR for various GDPR violations.

GDPR administrative fines can reach up to 20 million EUR or 4% of annual global turnover for the most serious violations. Organizations recording calls in Finland must take compliance seriously.

Phone Recording vs. In-Person Recording

Finnish law applies the same fundamental principles to phone and in-person recordings, but there are practical differences worth understanding.

Phone and Video Call Recording

The Finnish Data Protection Ombudsman's office has explicitly stated that citizens have the right to record telephone calls in which they are the caller or receiver. Finland's Constitution protects the right to record your own communications, and recording phone calls has not been criminalized in the Criminal Code's provisions on the protection of communications.

For businesses recording customer calls, the GDPR requires an upfront disclosure. The common practice of playing a message such as "This call may be recorded for quality and training purposes" serves both GDPR transparency obligations and establishes a basis for lawful processing.

In-Person Conversation Recording

Recording a face-to-face conversation follows the same one-party consent principle. If you are present and participating, you may record. The key factor is actual participation. You cannot place a hidden recording device in a room and leave, because you would become a non-participant for the portions of conversation occurring in your absence.

The eavesdropping provision under Chapter 24, Section 5 applies specifically to locations protected by domestic peace (kotirauha) and places where speakers have a reasonable expectation of privacy. A private living room, a hotel room, or a closed office where a confidential meeting takes place are all locations where eavesdropping laws protect against non-participant recording.

Workplace Recording and Surveillance in Finland

Workplace recording in Finland is governed by the Act on the Protection of Privacy in Working Life (Laki yksityisyyden suojasta tyoelamassa 759/2004). This is one of the most detailed workplace privacy statutes in Europe.

Camera Surveillance Rules

Employers may operate camera surveillance at workplaces only for three specific purposes: ensuring the personal security of employees and other persons on the premises, protecting property, and supervising the proper operation of production processes.

Critical restrictions apply. Camera surveillance may not be used for monitoring a particular employee or particular employees. Employers cannot single out workers for camera-based performance monitoring. Cameras are also prohibited in lavatories, changing rooms, staff facilities, and workrooms designated for the personal use of employees.

Transparency Requirements

Before implementing camera surveillance, employers must discuss the matter with employees or their representatives in a cooperation procedure (yhteistoimintamenettely). The employer must provide clear information about the purposes, locations, and methods of surveillance.

Camera surveillance must be as transparent as possible and necessary to achieve its stated purpose. Signs or notices must inform employees and visitors about the presence of cameras.

Use of Surveillance Recordings

Surveillance recordings can be used only for the purpose for which the surveillance was carried out. However, there are limited exceptions. Recordings may be used to substantiate the grounds for termination of an employment relationship or to identify and prove harassment, abuse, or inappropriate behavior at the workplace.

Audio Recording at Work

Audio recording in the Finnish workplace follows the general one-party consent rules. An employee participating in a meeting or conversation with a colleague or manager may record it without notification under criminal law.

However, GDPR obligations apply in a professional context. Recording rarely falls under the "personal or domestic use" exemption. In practice, Finnish courts and the DPA weigh the purpose of the recording when assessing whether workplace recordings are acceptable.

Employer Monitoring Limitations

The Act on the Protection of Privacy in Working Life limits employer access to employee personal data. Employers may process only personal data directly necessary for the employment relationship. No exceptions can be made to this necessity requirement, even with the employee's consent.

The occupational safety and health authorities supervise compliance with this Act, together with the Data Protection Ombudsman.

Recording in Public Places

Finland allows photography and filming in public spaces, but this right is balanced against privacy protections.

General Right to Photograph

You have the right to film and photograph in public places in Finland, including streets, roads, marketplaces, public squares, shopping centers, train stations, and areas outside airports. Finland does not require a filming permit for public locations in most situations.

The Finnish freedom of expression guarantee under Section 12 of the Constitution supports the right to record in public. As long as your recording activity does not significantly disrupt traffic or business operations, it is permitted.

Privacy Restrictions

Recording becomes problematic in private spaces. Finnish law protects domestic peace (kotirauha), which covers homes, holiday homes, common areas inside residential buildings, hotel rooms, tents, houseboats, private yards, and similar spaces. Recording inside these locations without permission from the occupant may violate Chapter 24 of the Criminal Code.

A photograph or recording of a person must not be published in a manner that infringes on the person's honor or privacy. Using a person's image for advertising purposes without consent is also prohibited.

Photographing Minors

Finnish law treats photographing minors with particular care. Taking photographs of children without permission from their legal guardians can raise legal issues even in public spaces where photography is generally permitted.

Public Figures

Public figures, including politicians and celebrities, may be photographed in public settings for non-commercial news and informational purposes without prior consent. However, commercial use of anyone's likeness requires permission.

Law Enforcement Recording and Wiretapping

Finnish law enforcement authorities have specific powers to conduct telecommunications interception and surveillance under the Coercive Measures Act (Pakkokeinolaki 806/2011).

Telecommunications Interception

Police may intercept telephone calls and electronic communications when investigating certain serious crimes. Telecommunications interception requires a court order and may be authorized only when it can be assumed to be of particularly important significance in clarifying the offense. This represents a heightened threshold beyond the general requirements for coercive measures.

Constitutional Safeguards

The confidentiality of communications guaranteed by Section 10 of the Constitution means that law enforcement wiretapping is permitted only within strict boundaries established by statute. Unauthorized surveillance by public officials can result in criminal liability.

The Information Society Code

The Act on Electronic Communications Services (917/2014) extends the obligation to protect the confidentiality of communications from traditional telecommunications companies to all intermediaries of electronic communications services. This covers phone calls, emails, SMS, MMS, voice messages, instant messages, and online messages.

Communications providers may process messages and traffic data only to the extent necessary for transmitting communications, implementing the agreed service, and ensuring information security as provided by law. The National Cyber Security Centre Finland (NCSC-FI) supervises compliance.

Criminal Penalties for Illegal Recording in Finland

Finland imposes criminal penalties for unauthorized recording and surveillance. The severity depends on the nature of the offense.

Offense	Statute	Penalty
Eavesdropping (salakuuntelu)	Ch. 24, Sec. 5	Fine or up to 1 year imprisonment
Illicit observation (salakatselu)	Ch. 24, Sec. 6	Fine or up to 1 year imprisonment
Preparation for eavesdropping/observation	Ch. 24, Sec. 7	Fine or up to 6 months imprisonment
Dissemination of private information	Ch. 24, Sec. 8	Fine or up to 2 years imprisonment
Aggravated dissemination	Ch. 24, Sec. 8a	Fine or up to 3 years imprisonment
Message interception	Ch. 38, Sec. 3	Fine or up to 2 years imprisonment
Aggravated message interception	Ch. 38, Sec. 4	Up to 3 years imprisonment
GDPR administrative fine	GDPR Art. 83	Up to 20 million EUR or 4% of global turnover

Prosecution Requirements

For eavesdropping, illicit observation, and dissemination of private information, the public prosecutor generally cannot bring charges unless the injured party files a report requesting prosecution. This means these offenses are complaint-based (asianomistajarikos) in most cases.

An exception exists when the Prosecutor-General determines that prosecution serves a very important public interest.

Practical Sentencing

In practice, Finnish courts typically impose fines or suspended (conditional) sentences for first-time eavesdropping or illicit observation offenses. Actual prison time is uncommon for these offenses unless the perpetrator has a prior criminal record or the circumstances are particularly egregious.

Business Compliance: Call Recording in Finland

Businesses operating in Finland that record customer or employee calls must navigate both criminal law and GDPR. Here is a practical compliance framework based on guidance from the Finnish Data Protection Ombudsman.

Step 1: Identify a Legal Basis

Choose the GDPR legal basis for your call recording. For customer service calls, legitimate interest (Article 6(1)(f)) is commonly used for quality assurance and training. For financial services, legal obligation (Article 6(1)(c)) may apply if regulations require transaction recording.

Step 2: Provide Clear Notice at the Start of the Call

The Finnish DPA has specifically ruled that customers must be told before recording begins. A simple mention on the company website is not enough. The notification must reach the person being recorded before the recording starts.

Play an audio announcement informing the caller that the call is being recorded, why it is being recorded, the legal basis for the recording, how to opt out if applicable, and where to find the full privacy notice.

Step 3: Document Your Processing

Maintain a Record of Processing Activities (ROPA) under GDPR Article 30 that includes call recording. Conduct a Data Protection Impact Assessment (DPIA) under Article 35 if the recording is systematic and large-scale.

Step 4: Honor Data Subject Rights

The Finnish DPA has confirmed that recorded callers have the right to request copies of their recordings under Article 15 GDPR. Businesses must be prepared to locate, extract, and provide these recordings within the one-month deadline.

Step 5: Set Retention Limits

Store recordings only as long as necessary for the stated purpose. Establish and enforce automatic deletion schedules. Indefinite retention of call recordings violates the GDPR principle of storage limitation (Article 5(1)(e)).

Key Differences from Neighboring Countries

Understanding how Finland compares to its Nordic neighbors helps travelers and cross-border businesses stay compliant.

Sweden follows a one-party consent model similar to Finland. A participant may record their own conversation without informing others.

Norway also follows one-party consent. Norwegian law permits a participant to record conversations they take part in.

Denmark permits one-party consent recording. A participant in a conversation can record it without the other party's knowledge.

Estonia generally follows one-party consent, but with stricter GDPR enforcement on how recordings are stored and shared.

Russia has complex recording laws that vary by context. Cross-border communications involving Russia require careful legal analysis.

For anyone traveling between Finland and its neighbors, the recording laws are generally consistent across the Nordic countries. However, GDPR enforcement varies by national DPA, and businesses operating across borders should follow the strictest applicable standard.