Finland - Human-Centric AI Programme
AuroraAI (National AI programme for human‑centric public services)
Finland
RAI-FI-NA-ANAPHXX-2020Finland - Human-Centric AI Programme is Adopted in Finland, according to vm.fi. We have not yet been able to confirm the status.
PolicyGovernance and OversightData Protection and PrivacyFundamental RightsAuroraAI was Finland’s national artificial intelligence programme (2019–2022/2023) led by the Ministry of Finance to create a human‑centric, life‑event based public service ecosystem leveraging AI. The programme produced an implementation plan, prototypes and reference implementations, and concluded its coordinated implementation activities by the end of 2022 with subsequent decommissioning decisions announced in 2023.
Summary
AuroraAI was launched as Finland’s national AI programme to steer public administration toward human‑centric, ethically sustainable AI use in public services. Originating from a 2018–2019 preparatory study, the AuroraAI programme (implementation plan 2019–2023) was coordinated by the Ministry of Finance and sought to create an open, decentralised network architecture (the AuroraAI Network) and an operating model that places life events and citizens’ needs at the centre of service provision. The programme emphasised cross‑sector collaboration (public, private, third sector), data‑driven decision support for both citizens and service providers, and pilot services that demonstrated information sharing and AI‑based recommendations to smooth service paths.
Core outputs included an AuroraAI development and implementation plan (2019–2023), reference implementations and pilots (for example services oriented to youth wellbeing), public ethical recommendations and privacy impact assessments, and open‑source components published by participating implementers. The initiative positioned AI as a tool to identify and address systemic societal challenges—such as demographic change and service fragmentation—by producing interoperable snapshots of needs across administrative boundaries.
AuroraAI framed human‑centricity, ethical sustainability, data protection and security as essential design principles. It advanced governance and institutional experimentation (a networked PPPP model) and generated documentation on architecture, testing, data protection impact assessments and ethics recommendations. Implementation was staged: preparatory study (2018–2019), planning and pilot implementations (2020–2022), and wider rollout preparations. By late 2022 the programme’s coordinated implementation activities under DigiFinland and the Ministry of Finance were concluded; subsequent announcements during 2023 recorded decisions to discontinue active maintenance of certain AuroraAI services and to archive or take components offline while preserving lessons learned.
While AuroraAI produced prototypes and policy lessons about human‑centric design, data governance and cross‑organizational collaboration, public debate and academic analysis highlighted unresolved legal, ethical and technical challenges: personal data aggregation and profiling risks, accountability for recommendations, the difficulty of achieving ‘digital twin’ functionality responsibly, and the need for clearer legal bases and institutional responsibilities. AuroraAI is therefore important as a national strategic experiment and a repository of practical governance lessons for EU‑level AI regulation, public sector AI governance, and for governments seeking to combine life‑event design with data‑driven public services.
Full article
Read full text ↗Overview
AuroraAI was initiated by Finland’s Ministry of Finance as a national artificial intelligence programme to prepare public administration for a human‑centric and ethically sustainable society in the age of AI. The programme published an implementation plan for 2019–2023 and carried out preparatory studies, pilots and reference implementations that demonstrated a life‑event oriented service ecosystem enabled by an "AuroraAI Network." For the Ministry of Finance overview and official description see Implementation of the national AuroraAI programme (Ministry of Finance). AuroraAI emphasised cross‑sector collaboration, user control, privacy safeguards and open models for interoperability while also producing documentation on architecture, ethical guidelines and data protection impact assessment work. The programme’s coordinated implementation phase concluded by the end of 2022 and subsequent decisions in 2023 led to decommissioning of active maintenance for some components; independent analyses and academic reviews summarising the results and lessons are available from research and advisory bodies.
Definitions
Key terms used across AuroraAI documentation included: "AuroraAI Network" — an open, decentralised interoperability layer enabling services and AI components to exchange metadata and recommendations; "Life Event" — a citizen‑centred use case (for example: becoming a parent, seeking employment, youth transitions) used to design cross‑organizational service chains; "Human‑centric AI" — AI systems designed to serve individual needs while preserving autonomy, privacy and rights; "Reference Implementation" — pilot code or service proof‑of‑concept demonstrating AuroraAI interfaces; "Digital twin" (as used in program discourse) — a computational representation of individual needs and service touchpoints; and "Ethical impact assessment" — guidance and deliverables produced to evaluate social and legal risks.
Governance and Institutional Framework
The programme was coordinated by Finland’s Ministry of Finance (Valtiovarainministeriö) and implemented through partnerships with cross‑government units, regional authorities, municipalities, DigiFinland (implementation partner for reference implementations) and research institutes. Governance combined programmatic leadership, expert working groups on ethics and data protection, and open stakeholder consultations. Formal planning documents (including the AuroraAI development and implementation plan 2019–2023) were circulated for public consultation; municipalities and sectoral ministries provided statements and positioned pilot work within existing service reform agendas. For the Ministry of Finance programme materials see Ministry of Finance – AuroraAI and for reporting on implementation and open‑source artifacts see DigiFinland – AuroraAI project summary. Institutional governance stressed: (1) distributed responsibilities across agencies; (2) documentation obligations for pilots; (3) privacy impact assessments prior to data sharing; and (4) ethical oversight through advisory groups.
Key Focus Areas
AuroraAI pursued several interlinked focus areas: (1) Service design & life‑event thinking — shifting development to citizen life events and service ecosystems rather than organizational silos; (2) Interoperability & architecture — designing an open, decentralised network to enable composable services and AI modules; (3) Data governance & privacy — embedding GDPR‑compatible approaches, privacy impact assessments and minimal data sharing; (4) Ethics & trust — developing recommendations for ethically sustainable AI in public services; (5) Pilots and reference implementations — producing demonstrators (notably youth‑wellbeing pilots and conversational AI prototypes) and publishing code to encourage reuse; (6) Skills & organizational change — supporting municipal and agency capacity building; and (7) International alignment — feeding lessons into EU and OECD policy dialogues. The programme positioned AI as an enabler to reduce fragmentation, predict service needs, and support proactive outreach while repeatedly cautioning that legal bases, accountability frameworks and robust testing are prerequisites for largescale deployment.
Implementation Framework
Implementation followed the 2019–2023 plan: a preparatory study (2018–2019), stakeholder consultation and pilot procurement (2020–2021), and reference implementations and scaling preparation (2021–2022). Delivery tasks included architectural design documents, data protection impact assessments, ethics recommendations, and sandboxed pilots. DigiFinland coordinated many of the technical pilots and published components and implementation reports; see DigiFinland AuroraAI project page. The Ministry of Finance acted as programme owner and coordinator with working groups for legal, ethical and technical matters. The implementation model emphasised iterative pilots, open procurement of implementation teams, and public consultations to inform both technical and governance decisions.
Monitoring and Evaluation
Monitoring relied on pilot reporting, stakeholder consultations and public metadata on outcomes. Evaluation produced lessons on legal constraints (GDPR and sectoral confidentiality rules), the complexity of cross‑organizational responsibility allocation, and the limits of technical readiness for comprehensive digital twins. External observers and academic studies produced critical reflections and case studies; see OECD/OPSI and academic reviews for independent assessments. The programme documented results from pilots and published evaluation summaries alongside open‑source artifacts to support reproducibility. Monitoring emphasized ethical risk analysis, data protection impact assessments, and continuous user testing for human‑centricity.
Penalties, Liability, and Appeals
AuroraAI itself was a strategic programme (not a binding regulation) and did not create new statutory penalties. Liability and enforcement for services built on AuroraAI components remained governed by existing Finnish and EU law (including GDPR, administrative law and sectoral rules). Where pilot services processed personal data, supervisory authority obligations and infringement regimes under GDPR applied; administrative recourse and appeal channels remained available through standard administrative courts and data protection complaint mechanisms (see the Office of the Data Protection Ombudsman). Programme guidance stressed that implementers must identify legal bases for processing, document accountability chains, and ensure redress pathways for citizens affected by automated recommendations.
Relationship to Other Instruments
AuroraAI linked to Finland’s broader AI strategy and national digital government programmes and was positioned to inform and be informed by EU‑level work (including preparatory work on the AI Act) and OECD guidance on public sector AI. The programme’s documentation and pilots informed government white papers on digital government reform and fed into sectoral policies (health and social care pilots, municipal service design). AuroraAI recommended alignment with GDPR, accessibility law, and public procurement rules; participating agencies emphasised compatibility with existing administrative law and data protection obligations.
International Alignment
AuroraAI engaged with international normative frameworks and shared lessons through OECD, UN and EU channels. Independent case studies (OECD/OPSI, UN DESA compendia) and academic analyses used AuroraAI as an example of national experimentation in human‑centric AI for public services. The programme’s emphasis on open‑model governance, ethical impact assessments and cross‑organizational interoperability was presented as a potential model for other governments while highlighting the need to reconcile national ambitions with EU legal constraints (notably GDPR) and forthcoming harmonised AI rules.
Implementation Timeline
| Phase | Dates | Notes |
|---|---|---|
| Preparatory study | 2018–02/2019 | Esiselvityshanke delivered baseline analysis and proposals |
| Plan & consultations | 03/2019–12/2019 | Development and public consultation of the 2019–2023 implementation plan (implementation plan PDF) |
| Pilots & reference implementations | 2020–2022 | Open procurements, municipal pilots, DigiFinland coordinated implementations |
| Consolidation and reporting | Late 2022–early 2023 | Programme activities wound down; reference results published |
| Decommissioning & archiving | 2023 | Decisions to discontinue active maintenance of certain components announced in 2023; lessons learned events and academic post‑mortems followed |
Sources and References
| Source | Type |
|---|---|
| Implementation of the national AuroraAI programme (Ministry of Finance) | Primary Source |
| AuroraAI development and implementation plan 2019–2023 (PDF) | Primary Source |
| DigiFinland: AuroraAI project summary | Primary/Implementation Reporting |
| OECD/OPSI case study: AuroraAI | Secondary Analysis |
| FCAI: Ethics reflections and post‑mortem (Dec 2023) | Secondary Analysis |
Requirements for a company
What an organisation has to do under Finland - Human-Centric AI Programme, at a glance. Not legal advice — the table below gives the provision and deadline for each item.
Not yet in force (Adopted). These requirements apply once the instrument takes effect and may change before then.
Must do
9- Document the GDPR legal basis and Data Protection Impact Assessment.Implementers of services built on AuroraAI components processing personal data.
- Provide appeals and complaint channels aligned with administrative law.Implementers of services built on AuroraAI components.
- Designate a responsible agency and contact for each service or component.Agencies implementing services or components using AuroraAI.
- Complete ethics guidance checklists and publish their outcomes.Implementers of services built on AuroraAI components.
- Conduct safety, fairness, and usability testing with real users in controlled pilots.Implementers of services built on AuroraAI components.
- Publish high-level descriptions of algorithms, data sources, and purposes.Implementers of services built on AuroraAI components.
- +3 more in the table below
Must not do
0Nothing in this category.
Should do
0Nothing in this category.
Should not do
0Nothing in this category.
Who must do what
The obligations under Finland - Human-Centric AI Programme, most serious first. Not legal advice — verify against the official text before relying on it.
| # | Who | Requirement | By when | Where | Severity |
|---|---|---|---|---|---|
| 1 | Implementers of services built on AuroraAI components processing personal data. | Document the GDPR legal basis and Data Protection Impact Assessment. “Document GDPR basis and DPIA before production deployment” | Before production deployment | Compliance Checklist | Critical |
| 2 | Implementers of services built on AuroraAI components. | Provide appeals and complaint channels aligned with administrative law. “Provide appeals and complaint channels aligned with administrative law” | — | Compliance Checklist | Critical |
| 3 | Agencies implementing services or components using AuroraAI. | Designate a responsible agency and contact for each service or component. “Designate responsible agency and contact for each service/component” | — | Compliance Checklist | Important |
| 4 | Implementers of services built on AuroraAI components. | Complete ethics guidance checklists and publish their outcomes. “Complete ethics guidance checklists and publish outcomes” | — | Compliance Checklist | Important |
| 5 | Implementers of services built on AuroraAI components. | Conduct safety, fairness, and usability testing with real users in controlled pilots. “Conduct safety, fairness and usability testing with real users in controlled pilots” | — | Compliance Checklist | Important |
| 6 | Implementers of services built on AuroraAI components. | Publish high-level descriptions of algorithms, data sources, and purposes. “Publish high‑level descriptions of algorithms, data sources and purposes” | — | Compliance Checklist | Important |
| 7 | Implementers of services built on AuroraAI components. | Ensure minimal data sharing when designing services and AI components. “minimal data sharing” | Before placing on market | Key Focus Areas | Important |
| 8 | Implementers of services built on AuroraAI components. | Design AI systems to preserve user autonomy, privacy, and rights. “AI systems designed to serve individual needs while preserving autonomy, privacy and rights” | Before placing on market | Definitions | Important |
| 9 | Agencies conducting pilots and reference implementations. | Document the results and processes of all pilots and reference implementations. “documentation obligations for pilots” | — | Governance and Institutional Framework | Important |
Related Regulations
More AI regulation in Finland
© Regulations.AI · updated on 20 Sep 2026