Finland's Hyteairo: 8 Years Guiding AI in Health & Social Care

Eight years ago today, on August 23, 2018, Finland embarked on a forward-thinking journey to integrate artificial intelligence and robotics responsibly into its social and health services with the launch of the Hyteairo programme. This strategic national policy has since been a cornerstone, guiding stakeholders in navigating the complex landscape of digital transformation in healthcare and social welfare across the nation. For the past eight years, Hyteairo has been actively shaping how public authorities, healthcare providers, and private companies approach the development and deployment of these transformative technologies.

What's changing — substance

The Hyteairo programme, led by the Ministry of Social Affairs and Health, was established to accelerate the safe and ethical adoption of AI and robotics within Finland's social and health sectors. It's crucial to understand that Hyteairo itself is a strategic policy programme, not a binding legal instrument that introduces new penalties or a specific enforcement regime. Instead, it serves as a comprehensive guide, emphasizing that all implementers must comply with existing Finnish and EU laws. This includes critical legislation such as the EU General Data Protection Regulation (GDPR) and, where applicable, the EU Medical Devices Regulation (MDR), alongside national health and patient safety acts.

Since its inception, Hyteairo has strongly recommended several key practices for organizations involved in AI and robotics in health and social care. A primary recommendation is to conduct a Digi-HTA (Health Technology Assessment for digital health) before procuring or widely deploying AI or robotics solutions. This assessment helps evaluate the technology's value, safety, and ethical implications. For high-risk systems, the programme advises completing a Data Protection Impact Assessment (DPIA) to ensure robust compliance with GDPR, a critical step in safeguarding personal data.

Furthermore, Hyteairo has consistently advocated for the establishment of clear clinical governance structures and robust incident reporting mechanisms within healthcare provider organizations. This ensures accountability and continuous improvement in the use of AI. A fundamental principle embedded in the programme is the active involvement of end-users, especially vulnerable groups, in the design and testing phases of solutions. This user-centric approach aims to ensure that technologies are truly beneficial, accessible, and safe for those they are intended to serve. While Hyteairo doesn't create new legal obligations, failing to follow its best practices can expose organizations to significant legal and reputational risks under existing legislation if issues like data breaches or patient harm arise. Liability for any harm caused by AI or robotics systems remains under existing civil, product, and professional liability laws.

Who is affected — jurisdictions, sectors, sizes

The Hyteairo programme primarily targets a broad range of stakeholders within Finland's national social and health services ecosystem. Its guidance is relevant for Finnish public authorities at various levels, including national bodies and regional wellbeing service counties, which are responsible for organizing health and social care services. Research organizations engaged in developing innovative AI and robotics solutions for these sectors also fall within the programme's scope, as do private companies that are either developing or implementing AI and robotics technologies intended for health and social care applications.

Essentially, any entity operating within Finland that is involved in the lifecycle of AI and robotics in the context of health and social services – from conceptualization and development to procurement and deployment – is encouraged to adhere to Hyteairo's principles. The programme's national scope means its recommendations apply uniformly across Finland, without specific regional variations, ensuring a consistent approach to AI and robotics integration nationwide. This inclusive approach aims to foster a unified and responsible innovation environment across the entire Finnish health and social care landscape.

Three things to do this week

Even eight years after its effective date, the principles of the Hyteairo programme remain highly relevant and actionable. Organizations involved in AI and robotics in Finnish health and social care should consider these concrete actions:

Comply with all binding laws and regulations, including GDPR and MDR: This is the foundational requirement. Regularly review your AI and robotics solutions to ensure they meet the stringent requirements of the EU General Data Protection Regulation, particularly concerning data processing and privacy. If your systems qualify as medical devices, ensure full compliance with the EU Medical Devices Regulation. This continuous vigilance is paramount, as emphasized by Hyteairo's framework for [Penalties, Liability, and Appeals].
Complete a Data Protection Impact Assessment (DPIA) for high-risk AI system uses: For any AI system that processes personal data and is likely to result in a high risk to the rights and freedoms of individuals, a DPIA is not just a recommendation but a legal obligation under GDPR. Hyteairo specifically highlights this as a critical compliance item within its [Implementation Framework]. Proactively identifying and mitigating data protection risks is essential for responsible AI deployment.
Integrate Hyteairo's best practices into your operational framework: Beyond legal compliance, adopt the programme's recommendations for best practice. This includes conducting Digi-HTAs to assess new digital health technologies, establishing robust clinical governance structures, and implementing clear incident reporting mechanisms. Crucially, ensure active involvement of end-users, especially vulnerable groups, throughout the design, development, and testing phases of your AI and robotics solutions. This user-centric approach helps build trust and ensures the solutions are fit for purpose and ethically sound.

Related context

The Hyteairo programme operates within a broader ecosystem of national strategies aimed at positioning Finland as a leader in AI and digital transformation. It complements and draws synergy from several other significant Finnish initiatives. The Artificial Intelligence Programme (National AI Programme), which began in 2017, laid much of the groundwork for Finland's overall AI strategy, focusing on competitiveness and societal well-being. Similarly, Finland’s Age of Artificial Intelligence, also launched in 2017, articulated a vision for how AI could transform various sectors of Finnish society.

More recently, the AuroraAI programme, which became active in 2020, has focused specifically on developing human-centric public services powered by AI. Hyteairo's emphasis on ethical deployment and user involvement in health and social care aligns perfectly with AuroraAI's goal of ensuring AI serves citizens effectively and responsibly. Together, these programmes form a cohesive national strategy, with Hyteairo providing the specialized guidance necessary for the unique challenges and opportunities presented by AI and robotics in the sensitive domains of health and social services.

Note: this article was drafted by AI - Google Gemini