Reform of the regulation of critical infrastructure

The purpose of the Act protecting critical infrastructure is to improve society's crisis resilience and national security. The Act was approved on 13 June 2025 and will enter into force on 1 July 2025.

Read more: Critical Infrastructure Protection and Crisis Resilience Act 

Background to the preparation

The Commission published the EU Security Union Strategy in 2020. It outlines comprehensive measures to promote the resilience of critical entities in the physical and digital environment. The EU Member States should use harmonised procedures to define and identify the entities critical to the functioning of societies and improve their crisis resilience. That will also improve the preparedness of the EU and its Member States for wide-ranging influence activities, such as hybrid threats.

The Critical Entities Resilience Directive introduces new requirements for Finland, including new official duties related to the identification and supervision of critical entities. Finland has not defined its national critical infrastructure, critical sectors or entities at the legislative level. 
The scope of the Directive covers eleven sectors: energy, transport, banking, financial market infrastructure, health, food, drinking water, waste water, digital infrastructure, public administration, and space. In the implementation of the Directive, sectors and industries may be included in national regulation if this is deemed necessary. 

n spring 2022, the Government submitted to Parliament a report on changes in the security environment. The report requires that the Government set up a legislative project to prepare a proposal for legislation on strengthening the resilience of critical infrastructure.

Since the publication of the Government report, the ministries have reviewed the existing national legislation and areas of development in official duties. The reviews identified the need to organise official duties and supervision in a centralised manner under the Government. These reviews will form the basis for the work on the legislative project. 

Project status

The Act was approved on 13 June 2025 and will enter into force on 1 July 2025
Consultation round 19 January - 4 March 2024.
The project was set up on 7 December 2022 and it will run until 31 December 2024.