Law note · Finland
GDPR Chapter V, Cross-Border Transfer of Personal Data from Finland
Transferring personal data of a person in Finland outside the European Economic Area requires a European Commission adequacy decision, Standard Contractual Clauses, Binding Corporate Rules, or a narrow Article 49 derogation, backed by the Article 83(5) top fine tier.
Section 27, read directly, disapplies Articles 44 to 50 for processing performed solely for journalistic, academic, artistic or literary purposes where applying them would infringe freedom of expression or information; outside that narrow exemption no Finland-specific broadening or narrowing of Chapter V was found.
What it asks of an app
- Rely on a European Commission adequacy decision, Standard Contractual Clauses with a transfer impact assessment, Binding Corporate Rules, or a narrow Article 49 derogation before moving personal data of a person in Finland outside the European Economic Area.
When LexLint raises it
Declared activities: crawls_web, trains_models, deploys_chatbot
Primary source: Official Journal text, EUR-Lex, Regulation (EU) 2016/679
Ministry of Justice, Finland, official English translation, Data Protection Act Section 27