Whistleblower law in Finland #
Finland implemented Directive (EU) 2019/1937 through Act 1171/2022 on the protection of persons reporting breaches of European Union and national law, in force since 1 January 2023. Finland combines the standard 50-worker threshold with a clearly identified centralised external reporting channel at the Office of the Chancellor of Justice.
Applicable law #
- Act 1171/2022 — official text on Finlex
- Office of the Chancellor of Justice — whistleblower protection
Who must establish an internal channel #
Private employers with at least 50 employees must establish an internal reporting channel. Public authorities and certain specifically regulated entities are also covered under the act. Entities in the financial-services and anti-money-laundering, transport-safety, and environmental sectors are in scope regardless of headcount.
External reporting authority #
The official external route is the centralised external reporting channel of the Office of the Chancellor of Justice. The Chancellor of Justice receives the report and forwards it to the competent authority for follow-up.
Data protection authority #
For GDPR complaints about how whistleblower data are processed, the relevant authority is the Office of the Data Protection Ombudsman.
Key compliance points #
- Finnish organisations must inform potential reporters not only about the internal process, but also about the external reporting procedure and the conditions for obtaining statutory protection.
- Finland’s law is narrower than a generic ethics line, so companies should separate statutory whistleblowing from broader misconduct intake if they choose to cover both.
- The Chancellor of Justice model makes Finland one of the clearer countries for explaining the external route to reporters.
Official sources #
- Act 1171/2022 — official Finlex text
- Office of the Chancellor of Justice — whistleblower protection
- Office of the Chancellor of Justice — centralised external reporting channel
- Office of the Data Protection Ombudsman