Rikoslaki Chapter 38, Tietomurto and Torkea tietomurto (Computer Break-in and Aggravated Computer Break-in)
Rikoslaki (39/1889) 38 luku 8-8a sec, as amended by 10.4.2015/368
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
In force since 4 September 2015.
A computer misuse rule binding public and private bodies.
As of 6 September 2026.
What it requires
- Do not gain access to a computer system, or a separately protected part of one, by using an access code that does not belong to you or by otherwise breaking a protective measure, and do not use a special technical device to obtain data from such a system without hacking into it, under Rikoslaki 38 luku 8 sec.
- Reading a public, unauthenticated page without defeating any access control has not itself been established as a computer break-in under this section.
If you get it wrong
Criminal exposureYes
Criminal exposure note
Tietomurto (computer break-in, Section 8): fine or imprisonment for at most two years. Torkea tietomurto (aggravated computer break-in, Section 8a), committed as part of an organized criminal group or in a particularly methodical manner, and aggravated also when assessed as a whole: fine or imprisonment for at most three years.
Who enforces it
Enforcement body
Ordinary Finnish criminal courts, on public prosecution.
What it reaches
Obligation class
Access restriction
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
Section 8 punishes unlawfully hacking into a computer system where data is processed, stored, or transmitted electronically, or into a separately protected part of such a system, by using an access code that does not belong to the offender or by otherwise breaking a protective measure, and separately punishes obtaining data from such a system by a special technical device without hacking into it, both as a computer break-in (tietomurto) punishable by a fine or imprisonment for at most two years; the section applies only where a more severe penalty is not provided elsewhere.
Section 8a raises the penalty to a fine or imprisonment for at most three years for an aggravated computer break-in, committed as part of an organized criminal group or in a particularly methodical manner, where the offense is also aggravated when assessed as a whole.
When LexLint raises it
crawls_webtrains_models