Finland - Human-Centric AI Programme

AuroraAI (National AI programme for human‑centric public services)

Finland

RAI-FI-NA-ANAPHXX-2020
Adopted(Adopted)
PolicyGovernance and OversightData Protection and PrivacyFundamental Rights
Export PDF

AuroraAI was Finland’s national artificial intelligence programme (2019–2022/2023) led by the Ministry of Finance to create a human‑centric, life‑event based public service ecosystem leveraging AI. The programme produced an implementation plan, prototypes and reference implementations, and concluded its coordinated implementation activities by the end of 2022 with subsequent decommissioning decisions announced in 2023.

Overview

AuroraAI was initiated by Finland’s Ministry of Finance as a national artificial intelligence programme to prepare public administration for a human‑centric and ethically sustainable society in the age of AI. The programme published an implementation plan for 2019–2023 and carried out preparatory studies, pilots and reference implementations that demonstrated a life‑event oriented service ecosystem enabled by an "AuroraAI Network." For the Ministry of Finance overview and official description see Implementation of the national AuroraAI programme (Ministry of Finance). AuroraAI emphasised cross‑sector collaboration, user control, privacy safeguards and open models for interoperability while also producing documentation on architecture, ethical guidelines and data protection impact assessment work. The programme’s coordinated implementation phase concluded by the end of 2022 and subsequent decisions in 2023 led to decommissioning of active maintenance for some components; independent analyses and academic reviews summarising the results and lessons are available from research and advisory bodies.

Definitions

Key terms used across AuroraAI documentation included: "AuroraAI Network" — an open, decentralised interoperability layer enabling services and AI components to exchange metadata and recommendations; "Life Event" — a citizen‑centred use case (for example: becoming a parent, seeking employment, youth transitions) used to design cross‑organizational service chains; "Human‑centric AI" — AI systems designed to serve individual needs while preserving autonomy, privacy and rights; "Reference Implementation" — pilot code or service proof‑of‑concept demonstrating AuroraAI interfaces; "Digital twin" (as used in program discourse) — a computational representation of individual needs and service touchpoints; and "Ethical impact assessment" — guidance and deliverables produced to evaluate social and legal risks.

Governance and Institutional Framework

The programme was coordinated by Finland’s Ministry of Finance (Valtiovarainministeriö) and implemented through partnerships with cross‑government units, regional authorities, municipalities, DigiFinland (implementation partner for reference implementations) and research institutes. Governance combined programmatic leadership, expert working groups on ethics and data protection, and open stakeholder consultations. Formal planning documents (including the AuroraAI development and implementation plan 2019–2023) were circulated for public consultation; municipalities and sectoral ministries provided statements and positioned pilot work within existing service reform agendas. For the Ministry of Finance programme materials see Ministry of Finance – AuroraAI and for reporting on implementation and open‑source artifacts see DigiFinland – AuroraAI project summary. Institutional governance stressed: (1) distributed responsibilities across agencies; (2) documentation obligations for pilots; (3) privacy impact assessments prior to data sharing; and (4) ethical oversight through advisory groups.

Key Focus Areas

AuroraAI pursued several interlinked focus areas: (1) Service design & life‑event thinking — shifting development to citizen life events and service ecosystems rather than organizational silos; (2) Interoperability & architecture — designing an open, decentralised network to enable composable services and AI modules; (3) Data governance & privacy — embedding GDPR‑compatible approaches, privacy impact assessments and minimal data sharing; (4) Ethics & trust — developing recommendations for ethically sustainable AI in public services; (5) Pilots and reference implementations — producing demonstrators (notably youth‑wellbeing pilots and conversational AI prototypes) and publishing code to encourage reuse; (6) Skills & organizational change — supporting municipal and agency capacity building; and (7) International alignment — feeding lessons into EU and OECD policy dialogues. The programme positioned AI as an enabler to reduce fragmentation, predict service needs, and support proactive outreach while repeatedly cautioning that legal bases, accountability frameworks and robust testing are prerequisites for largescale deployment.

Implementation Framework

Implementation followed the 2019–2023 plan: a preparatory study (2018–2019), stakeholder consultation and pilot procurement (2020–2021), and reference implementations and scaling preparation (2021–2022). Delivery tasks included architectural design documents, data protection impact assessments, ethics recommendations, and sandboxed pilots. DigiFinland coordinated many of the technical pilots and published components and implementation reports; see DigiFinland AuroraAI project page. The Ministry of Finance acted as programme owner and coordinator with working groups for legal, ethical and technical matters. The implementation model emphasised iterative pilots, open procurement of implementation teams, and public consultations to inform both technical and governance decisions.

Monitoring and Evaluation

Monitoring relied on pilot reporting, stakeholder consultations and public metadata on outcomes. Evaluation produced lessons on legal constraints (GDPR and sectoral confidentiality rules), the complexity of cross‑organizational responsibility allocation, and the limits of technical readiness for comprehensive digital twins. External observers and academic studies produced critical reflections and case studies; see OECD/OPSI and academic reviews for independent assessments. The programme documented results from pilots and published evaluation summaries alongside open‑source artifacts to support reproducibility. Monitoring emphasized ethical risk analysis, data protection impact assessments, and continuous user testing for human‑centricity.

Penalties, Liability, and Appeals

AuroraAI itself was a strategic programme (not a binding regulation) and did not create new statutory penalties. Liability and enforcement for services built on AuroraAI components remained governed by existing Finnish and EU law (including GDPR, administrative law and sectoral rules). Where pilot services processed personal data, supervisory authority obligations and infringement regimes under GDPR applied; administrative recourse and appeal channels remained available through standard administrative courts and data protection complaint mechanisms (see the Office of the Data Protection Ombudsman). Programme guidance stressed that implementers must identify legal bases for processing, document accountability chains, and ensure redress pathways for citizens affected by automated recommendations.

Relationship to Other Instruments

AuroraAI linked to Finland’s broader AI strategy and national digital government programmes and was positioned to inform and be informed by EU‑level work (including preparatory work on the AI Act) and OECD guidance on public sector AI. The programme’s documentation and pilots informed government white papers on digital government reform and fed into sectoral policies (health and social care pilots, municipal service design). AuroraAI recommended alignment with GDPR, accessibility law, and public procurement rules; participating agencies emphasised compatibility with existing administrative law and data protection obligations.

International Alignment

AuroraAI engaged with international normative frameworks and shared lessons through OECD, UN and EU channels. Independent case studies (OECD/OPSI, UN DESA compendia) and academic analyses used AuroraAI as an example of national experimentation in human‑centric AI for public services. The programme’s emphasis on open‑model governance, ethical impact assessments and cross‑organizational interoperability was presented as a potential model for other governments while highlighting the need to reconcile national ambitions with EU legal constraints (notably GDPR) and forthcoming harmonised AI rules.

Implementation Timeline

PhaseDatesNotes
Preparatory study2018–02/2019Esiselvityshanke delivered baseline analysis and proposals
Plan & consultations03/2019–12/2019Development and public consultation of the 2019–2023 implementation plan (implementation plan PDF)
Pilots & reference implementations2020–2022Open procurements, municipal pilots, DigiFinland coordinated implementations
Consolidation and reportingLate 2022–early 2023Programme activities wound down; reference results published
Decommissioning & archiving2023Decisions to discontinue active maintenance of certain components announced in 2023; lessons learned events and academic post‑mortems followed

Compliance Checklist

RequirementChecklist
Legal basis for data processingDocument GDPR basis and DPIA before production deployment
AccountabilityDesignate responsible agency and contact for each service/component
Ethics assessmentComplete ethics guidance checklists and publish outcomes
TestingConduct safety, fairness and usability testing with real users in controlled pilots
TransparencyPublish high‑level descriptions of algorithms, data sources and purposes
RedressProvide appeals and complaint channels aligned with administrative law

Sources and References

SourceType
Implementation of the national AuroraAI programme (Ministry of Finance)Primary Source
AuroraAI development and implementation plan 2019–2023 (PDF)Primary Source
DigiFinland: AuroraAI project summaryPrimary/Implementation Reporting
OECD/OPSI case study: AuroraAISecondary Analysis
FCAI: Ethics reflections and post‑mortem (Dec 2023)Secondary Analysis
Plain English

Finland's AuroraAI was a national program from 2019 to 2022, designed to guide public administration, municipalities, and their partners in developing human-centric artificial intelligence services for citizens, rather than a binding regulation imposing new legal obligations. This initiative, led by the Ministry of Finance, aimed to prepare Finnish public services for the age of AI by creating an ecosystem of services centered around citizen "life events" like becoming a parent or seeking employment.

The program primarily applied to Finnish public administration bodies, including ministries, regional authorities, and municipalities, as well as their implementation partners like DigiFinland. While it didn't create new laws, it established crucial guidelines for those developing AI services. Key among these were: - Designing services around real-world citizen needs and life events, moving away from organizational silos. - Prioritizing user control, robust privacy safeguards, and open models for interoperability, ensuring compliance with the General Data Protection Regulation (GDPR). - Conducting ethical impact assessments and documenting the legal basis for data processing and accountability chains for any AI-powered services.

AuroraAI actively ran its pilot and implementation phases from 2020 to 2022, producing prototypes and reference implementations. However, its coordinated activities concluded by the end of 2022, with subsequent decisions in 2023 leading to the decommissioning of active maintenance for some of its components.

Crucially, AuroraAI itself carried no new penalties or enforcement mechanisms. Instead, any services developed under its guidance remained subject to existing Finnish and European Union laws, including GDPR for data protection, administrative law, and sectoral regulations. A significant practical takeaway for anyone considering similar initiatives is that despite its ambitious goals, the program ultimately wound down, with some components no longer actively maintained. This underscores the complexities of cross-organizational responsibility and the legal and technical challenges inherent in implementing large-scale AI in public services.

Plain-English rewrite by Regulations.ai — not legal advice. Verify against the official text.

What you must do — compliance checklist

0 / 9 marked complete

Plain-English obligations under Finland - Human-Centric AI Programme. Not legal advice — verify against the official text before relying on it.

  1. #1CriticalCompliance ChecklistBefore production deployment

    Applies to: Implementers of services built on AuroraAI components processing personal data.

    Document GDPR basis and DPIA before production deployment
  2. #2CriticalCompliance Checklist

    Applies to: Implementers of services built on AuroraAI components.

    Provide appeals and complaint channels aligned with administrative law
  3. #3ImportantCompliance Checklist

    Applies to: Agencies implementing services or components using AuroraAI.

    Designate responsible agency and contact for each service/component
  4. #4ImportantCompliance Checklist

    Applies to: Implementers of services built on AuroraAI components.

    Complete ethics guidance checklists and publish outcomes
  5. #5ImportantCompliance Checklist

    Applies to: Implementers of services built on AuroraAI components.

    Conduct safety, fairness and usability testing with real users in controlled pilots
  6. #6ImportantCompliance Checklist

    Applies to: Implementers of services built on AuroraAI components.

    Publish high‑level descriptions of algorithms, data sources and purposes
  7. #7ImportantKey Focus AreasBefore placing on market

    Applies to: Implementers of services built on AuroraAI components.

    minimal data sharing
  8. #8ImportantDefinitionsBefore placing on market

    Applies to: Implementers of services built on AuroraAI components.

    AI systems designed to serve individual needs while preserving autonomy, privacy and rights
  9. #9ImportantGovernance and Institutional Framework

    Applies to: Agencies conducting pilots and reference implementations.

    documentation obligations for pilots

© Regulations.AI — created on 13-Jun-2026