Whistleblower law in Finland #
Finland implemented Directive (EU) 2019/1937 through Act 1171/2022 on the protection of persons reporting breaches of European Union and national law, in force since 1 January 2023. Finland combines the standard 50-worker threshold with a clearly identified centralised external reporting channel at the Office of the Chancellor of Justice.
Applicable law #
- Act 1171/2022 — official text on Finlex
- Office of the Chancellor of Justice — whistleblower protection
Who must establish an internal channel #
Private employers with at least 50 employees must establish an internal reporting channel. Public authorities and certain specifically regulated entities are also covered under the act. Entities in the financial-services and anti-money-laundering, transport-safety, and environmental sectors are in scope regardless of headcount.
External reporting authority #
The official external route is the centralised external reporting channel of the Office of the Chancellor of Justice . The Chancellor of Justice receives the report and forwards it to the competent authority for follow-up.
Data protection authority #
For GDPR complaints about how whistleblower data are processed, the relevant authority is the Office of the Data Protection Ombudsman .
Key compliance points #
- Finnish organisations must inform potential reporters not only about the internal process, but also about the external reporting procedure and the conditions for obtaining statutory protection.
- Finland’s law is narrower than a generic ethics line, so companies should separate statutory whistleblowing from broader misconduct intake if they choose to cover both.
- The Chancellor of Justice model makes Finland one of the clearer countries for explaining the external route to reporters.
Official sources #
- Act 1171/2022 — official Finlex text
- Office of the Chancellor of Justice — whistleblower protection
- Office of the Chancellor of Justice — centralised external reporting channel
- Office of the Data Protection Ombudsman