Finland - Human-Centric AI Programme
AuroraAI (National AI programme for human‑centric public services)
Finland
RAI-FI-NA-ANAPHXX-2020AuroraAI was Finland’s national artificial intelligence programme (2019–2022/2023) led by the Ministry of Finance to create a human‑centric, life‑event based public service ecosystem leveraging AI. The programme produced an implementation plan, prototypes and reference implementations, and concluded its coordinated implementation activities by the end of 2022 with subsequent decommissioning decisions announced in 2023.
Summary
Read full text ↗Plain English
Overview
AuroraAI was initiated by Finland’s Ministry of Finance as a national artificial intelligence programme to prepare public administration for a human‑centric and ethically sustainable society in the age of AI. The programme published an implementation plan for 2019–2023 and carried out preparatory studies, pilots and reference implementations that demonstrated a life‑event oriented service ecosystem enabled by an "AuroraAI Network." For the Ministry of Finance overview and official description see Implementation of the national AuroraAI programme (Ministry of Finance). AuroraAI emphasised cross‑sector collaboration, user control, privacy safeguards and open models for interoperability while also producing documentation on architecture, ethical guidelines and data protection impact assessment work. The programme’s coordinated implementation phase concluded by the end of 2022 and subsequent decisions in 2023 led to decommissioning of active maintenance for some components; independent analyses and academic reviews summarising the results and lessons are available from research and advisory bodies.
Definitions
Key terms used across AuroraAI documentation included: "AuroraAI Network" — an open, decentralised interoperability layer enabling services and AI components to exchange metadata and recommendations; "Life Event" — a citizen‑centred use case (for example: becoming a parent, seeking employment, youth transitions) used to design cross‑organizational service chains; "Human‑centric AI" — AI systems designed to serve individual needs while preserving autonomy, privacy and rights; "Reference Implementation" — pilot code or service proof‑of‑concept demonstrating AuroraAI interfaces; "Digital twin" (as used in program discourse) — a computational representation of individual needs and service touchpoints; and "Ethical impact assessment" — guidance and deliverables produced to evaluate social and legal risks.
Governance and Institutional Framework
The programme was coordinated by Finland’s Ministry of Finance (Valtiovarainministeriö) and implemented through partnerships with cross‑government units, regional authorities, municipalities, DigiFinland (implementation partner for reference implementations) and research institutes. Governance combined programmatic leadership, expert working groups on ethics and data protection, and open stakeholder consultations. Formal planning documents (including the AuroraAI development and implementation plan 2019–2023) were circulated for public consultation; municipalities and sectoral ministries provided statements and positioned pilot work within existing service reform agendas. For the Ministry of Finance programme materials see Ministry of Finance – AuroraAI and for reporting on implementation and open‑source artifacts see DigiFinland – AuroraAI project summary. Institutional governance stressed: (1) distributed responsibilities across agencies; (2) documentation obligations for pilots; (3) privacy impact assessments prior to data sharing; and (4) ethical oversight through advisory groups.
Key Focus Areas
AuroraAI pursued several interlinked focus areas: (1) Service design & life‑event thinking — shifting development to citizen life events and service ecosystems rather than organizational silos; (2) Interoperability & architecture — designing an open, decentralised network to enable composable services and AI modules; (3) Data governance & privacy — embedding GDPR‑compatible approaches, privacy impact assessments and minimal data sharing; (4) Ethics & trust — developing recommendations for ethically sustainable AI in public services; (5) Pilots and reference implementations — producing demonstrators (notably youth‑wellbeing pilots and conversational AI prototypes) and publishing code to encourage reuse; (6) Skills & organizational change — supporting municipal and agency capacity building; and (7) International alignment — feeding lessons into EU and OECD policy dialogues. The programme positioned AI as an enabler to reduce fragmentation, predict service needs, and support proactive outreach while repeatedly cautioning that legal bases, accountability frameworks and robust testing are prerequisites for largescale deployment.
Implementation Framework
Implementation followed the 2019–2023 plan: a preparatory study (2018–2019), stakeholder consultation and pilot procurement (2020–2021), and reference implementations and scaling preparation (2021–2022). Delivery tasks included architectural design documents, data protection impact assessments, ethics recommendations, and sandboxed pilots. DigiFinland coordinated many of the technical pilots and published components and implementation reports; see DigiFinland AuroraAI project page. The Ministry of Finance acted as programme owner and coordinator with working groups for legal, ethical and technical matters. The implementation model emphasised iterative pilots, open procurement of implementation teams, and public consultations to inform both technical and governance decisions.
Monitoring and Evaluation
Monitoring relied on pilot reporting, stakeholder consultations and public metadata on outcomes. Evaluation produced lessons on legal constraints (GDPR and sectoral confidentiality rules), the complexity of cross‑organizational responsibility allocation, and the limits of technical readiness for comprehensive digital twins. External observers and academic studies produced critical reflections and case studies; see OECD/OPSI and academic reviews for independent assessments. The programme documented results from pilots and published evaluation summaries alongside open‑source artifacts to support reproducibility. Monitoring emphasized ethical risk analysis, data protection impact assessments, and continuous user testing for human‑centricity.
Penalties, Liability, and Appeals
AuroraAI itself was a strategic programme (not a binding regulation) and did not create new statutory penalties. Liability and enforcement for services built on AuroraAI components remained governed by existing Finnish and EU law (including GDPR, administrative law and sectoral rules). Where pilot services processed personal data, supervisory authority obligations and infringement regimes under GDPR applied; administrative recourse and appeal channels remained available through standard administrative courts and data protection complaint mechanisms (see the Office of the Data Protection Ombudsman). Programme guidance stressed that implementers must identify legal bases for processing, document accountability chains, and ensure redress pathways for citizens affected by automated recommendations.
Relationship to Other Instruments
AuroraAI linked to Finland’s broader AI strategy and national digital government programmes and was positioned to inform and be informed by EU‑level work (including preparatory work on the AI Act) and OECD guidance on public sector AI. The programme’s documentation and pilots informed government white papers on digital government reform and fed into sectoral policies (health and social care pilots, municipal service design). AuroraAI recommended alignment with GDPR, accessibility law, and public procurement rules; participating agencies emphasised compatibility with existing administrative law and data protection obligations.
International Alignment
AuroraAI engaged with international normative frameworks and shared lessons through OECD, UN and EU channels. Independent case studies (OECD/OPSI, UN DESA compendia) and academic analyses used AuroraAI as an example of national experimentation in human‑centric AI for public services. The programme’s emphasis on open‑model governance, ethical impact assessments and cross‑organizational interoperability was presented as a potential model for other governments while highlighting the need to reconcile national ambitions with EU legal constraints (notably GDPR) and forthcoming harmonised AI rules.
Implementation Timeline
| Phase | Dates | Notes |
|---|---|---|
| Preparatory study | 2018–02/2019 | Esiselvityshanke delivered baseline analysis and proposals |
| Plan & consultations | 03/2019–12/2019 | Development and public consultation of the 2019–2023 implementation plan (implementation plan PDF) |
| Pilots & reference implementations | 2020–2022 | Open procurements, municipal pilots, DigiFinland coordinated implementations |
| Consolidation and reporting | Late 2022–early 2023 | Programme activities wound down; reference results published |
| Decommissioning & archiving | 2023 | Decisions to discontinue active maintenance of certain components announced in 2023; lessons learned events and academic post‑mortems followed |
Compliance Checklist
| Requirement | Checklist |
|---|---|
| Legal basis for data processing | Document GDPR basis and DPIA before production deployment |
| Accountability | Designate responsible agency and contact for each service/component |
| Ethics assessment | Complete ethics guidance checklists and publish outcomes |
| Testing | Conduct safety, fairness and usability testing with real users in controlled pilots |
| Transparency | Publish high‑level descriptions of algorithms, data sources and purposes |
| Redress | Provide appeals and complaint channels aligned with administrative law |
Sources and References
| Source | Type |
|---|---|
| Implementation of the national AuroraAI programme (Ministry of Finance) | Primary Source |
| AuroraAI development and implementation plan 2019–2023 (PDF) | Primary Source |
| DigiFinland: AuroraAI project summary | Primary/Implementation Reporting |
| OECD/OPSI case study: AuroraAI | Secondary Analysis |
| FCAI: Ethics reflections and post‑mortem (Dec 2023) | Secondary Analysis |
Finland's AuroraAI was a national program from 2019 to 2022, designed to guide public administration, municipalities, and their partners in developing human-centric artificial intelligence services for citizens, rather than a binding regulation imposing new legal obligations. This initiative, led by the Ministry of Finance, aimed to prepare Finnish public services for the age of AI by creating an ecosystem of services centered around citizen "life events" like becoming a parent or seeking employment.
The program primarily applied to Finnish public administration bodies, including ministries, regional authorities, and municipalities, as well as their implementation partners like DigiFinland. While it didn't create new laws, it established crucial guidelines for those developing AI services. Key among these were: - Designing services around real-world citizen needs and life events, moving away from organizational silos. - Prioritizing user control, robust privacy safeguards, and open models for interoperability, ensuring compliance with the General Data Protection Regulation (GDPR). - Conducting ethical impact assessments and documenting the legal basis for data processing and accountability chains for any AI-powered services.
AuroraAI actively ran its pilot and implementation phases from 2020 to 2022, producing prototypes and reference implementations. However, its coordinated activities concluded by the end of 2022, with subsequent decisions in 2023 leading to the decommissioning of active maintenance for some of its components.
Crucially, AuroraAI itself carried no new penalties or enforcement mechanisms. Instead, any services developed under its guidance remained subject to existing Finnish and European Union laws, including GDPR for data protection, administrative law, and sectoral regulations. A significant practical takeaway for anyone considering similar initiatives is that despite its ambitious goals, the program ultimately wound down, with some components no longer actively maintained. This underscores the complexities of cross-organizational responsibility and the legal and technical challenges inherent in implementing large-scale AI in public services.
Plain-English rewrite by Regulations.ai — not legal advice. Verify against the official text.
What you must do — compliance checklist
0 / 9 marked completePlain-English obligations under Finland - Human-Centric AI Programme. Not legal advice — verify against the official text before relying on it.
- #1CriticalCompliance Checklist⏰ Before production deployment
Applies to: Implementers of services built on AuroraAI components processing personal data.
“Document GDPR basis and DPIA before production deployment”
- #2CriticalCompliance Checklist
Applies to: Implementers of services built on AuroraAI components.
“Provide appeals and complaint channels aligned with administrative law”
- #3ImportantCompliance Checklist
Applies to: Agencies implementing services or components using AuroraAI.
“Designate responsible agency and contact for each service/component”
- #4ImportantCompliance Checklist
Applies to: Implementers of services built on AuroraAI components.
“Complete ethics guidance checklists and publish outcomes”
- #5ImportantCompliance Checklist
Applies to: Implementers of services built on AuroraAI components.
“Conduct safety, fairness and usability testing with real users in controlled pilots”
- #6ImportantCompliance Checklist
Applies to: Implementers of services built on AuroraAI components.
“Publish high‑level descriptions of algorithms, data sources and purposes”
- #7ImportantKey Focus Areas⏰ Before placing on market
Applies to: Implementers of services built on AuroraAI components.
“minimal data sharing”
- #8ImportantDefinitions⏰ Before placing on market
Applies to: Implementers of services built on AuroraAI components.
“AI systems designed to serve individual needs while preserving autonomy, privacy and rights”
- #9ImportantGovernance and Institutional Framework
Applies to: Agencies conducting pilots and reference implementations.
“documentation obligations for pilots”
Related Regulations
Artificial Intelligence Programme (National AI Programme)
Finland92% similar
Finland’s Age of Artificial Intelligence
Finland90% similar
Hyteairo — Well‑being and Health Sector’s Artificial Intelligence and Robotics Programme
Finland89% similar
Artificial Intelligence 4.0 Programme
Finland88% similar
Work in the Age of Artificial Intelligence
Finland88% similar
© Regulations.AI — created on 13-Jun-2026