Finland - Human-Centric AI Programme

AuroraAI (National AI programme for human‑centric public services)

Finland

RAI-FI-NA-ANAPHXX-2020
Adopted(Adopted)As published at vm.fi

Finland - Human-Centric AI Programme is Adopted in Finland, according to vm.fi. We have not yet been able to confirm the status.

PolicyGovernance and OversightData Protection and PrivacyFundamental Rights
Export PDF

AuroraAI was Finland’s national artificial intelligence programme (2019–2022/2023) led by the Ministry of Finance to create a human‑centric, life‑event based public service ecosystem leveraging AI. The programme produced an implementation plan, prototypes and reference implementations, and concluded its coordinated implementation activities by the end of 2022 with subsequent decommissioning decisions announced in 2023.

Summary

AuroraAI was launched as Finland’s national AI programme to steer public administration toward human‑centric, ethically sustainable AI use in public services. Originating from a 2018–2019 preparatory study, the AuroraAI programme (implementation plan 2019–2023) was coordinated by the Ministry of Finance and sought to create an open, decentralised network architecture (the AuroraAI Network) and an operating model that places life events and citizens’ needs at the centre of service provision. The programme emphasised cross‑sector collaboration (public, private, third sector), data‑driven decision support for both citizens and service providers, and pilot services that demonstrated information sharing and AI‑based recommendations to smooth service paths.

Core outputs included an AuroraAI development and implementation plan (2019–2023), reference implementations and pilots (for example services oriented to youth wellbeing), public ethical recommendations and privacy impact assessments, and open‑source components published by participating implementers. The initiative positioned AI as a tool to identify and address systemic societal challenges—such as demographic change and service fragmentation—by producing interoperable snapshots of needs across administrative boundaries.

AuroraAI framed human‑centricity, ethical sustainability, data protection and security as essential design principles. It advanced governance and institutional experimentation (a networked PPPP model) and generated documentation on architecture, testing, data protection impact assessments and ethics recommendations. Implementation was staged: preparatory study (2018–2019), planning and pilot implementations (2020–2022), and wider rollout preparations. By late 2022 the programme’s coordinated implementation activities under DigiFinland and the Ministry of Finance were concluded; subsequent announcements during 2023 recorded decisions to discontinue active maintenance of certain AuroraAI services and to archive or take components offline while preserving lessons learned.

While AuroraAI produced prototypes and policy lessons about human‑centric design, data governance and cross‑organizational collaboration, public debate and academic analysis highlighted unresolved legal, ethical and technical challenges: personal data aggregation and profiling risks, accountability for recommendations, the difficulty of achieving ‘digital twin’ functionality responsibly, and the need for clearer legal bases and institutional responsibilities. AuroraAI is therefore important as a national strategic experiment and a repository of practical governance lessons for EU‑level AI regulation, public sector AI governance, and for governments seeking to combine life‑event design with data‑driven public services.

Full article

Read full text ↗

Overview

AuroraAI was initiated by Finland’s Ministry of Finance as a national artificial intelligence programme to prepare public administration for a human‑centric and ethically sustainable society in the age of AI. The programme published an implementation plan for 2019–2023 and carried out preparatory studies, pilots and reference implementations that demonstrated a life‑event oriented service ecosystem enabled by an "AuroraAI Network." For the Ministry of Finance overview and official description see Implementation of the national AuroraAI programme (Ministry of Finance). AuroraAI emphasised cross‑sector collaboration, user control, privacy safeguards and open models for interoperability while also producing documentation on architecture, ethical guidelines and data protection impact assessment work. The programme’s coordinated implementation phase concluded by the end of 2022 and subsequent decisions in 2023 led to decommissioning of active maintenance for some components; independent analyses and academic reviews summarising the results and lessons are available from research and advisory bodies.

Definitions

Key terms used across AuroraAI documentation included: "AuroraAI Network" — an open, decentralised interoperability layer enabling services and AI components to exchange metadata and recommendations; "Life Event" — a citizen‑centred use case (for example: becoming a parent, seeking employment, youth transitions) used to design cross‑organizational service chains; "Human‑centric AI" — AI systems designed to serve individual needs while preserving autonomy, privacy and rights; "Reference Implementation" — pilot code or service proof‑of‑concept demonstrating AuroraAI interfaces; "Digital twin" (as used in program discourse) — a computational representation of individual needs and service touchpoints; and "Ethical impact assessment" — guidance and deliverables produced to evaluate social and legal risks.

Governance and Institutional Framework

The programme was coordinated by Finland’s Ministry of Finance (Valtiovarainministeriö) and implemented through partnerships with cross‑government units, regional authorities, municipalities, DigiFinland (implementation partner for reference implementations) and research institutes. Governance combined programmatic leadership, expert working groups on ethics and data protection, and open stakeholder consultations. Formal planning documents (including the AuroraAI development and implementation plan 2019–2023) were circulated for public consultation; municipalities and sectoral ministries provided statements and positioned pilot work within existing service reform agendas. For the Ministry of Finance programme materials see Ministry of Finance – AuroraAI and for reporting on implementation and open‑source artifacts see DigiFinland – AuroraAI project summary. Institutional governance stressed: (1) distributed responsibilities across agencies; (2) documentation obligations for pilots; (3) privacy impact assessments prior to data sharing; and (4) ethical oversight through advisory groups.

Key Focus Areas

AuroraAI pursued several interlinked focus areas: (1) Service design & life‑event thinking — shifting development to citizen life events and service ecosystems rather than organizational silos; (2) Interoperability & architecture — designing an open, decentralised network to enable composable services and AI modules; (3) Data governance & privacy — embedding GDPR‑compatible approaches, privacy impact assessments and minimal data sharing; (4) Ethics & trust — developing recommendations for ethically sustainable AI in public services; (5) Pilots and reference implementations — producing demonstrators (notably youth‑wellbeing pilots and conversational AI prototypes) and publishing code to encourage reuse; (6) Skills & organizational change — supporting municipal and agency capacity building; and (7) International alignment — feeding lessons into EU and OECD policy dialogues. The programme positioned AI as an enabler to reduce fragmentation, predict service needs, and support proactive outreach while repeatedly cautioning that legal bases, accountability frameworks and robust testing are prerequisites for largescale deployment.

Implementation Framework

Implementation followed the 2019–2023 plan: a preparatory study (2018–2019), stakeholder consultation and pilot procurement (2020–2021), and reference implementations and scaling preparation (2021–2022). Delivery tasks included architectural design documents, data protection impact assessments, ethics recommendations, and sandboxed pilots. DigiFinland coordinated many of the technical pilots and published components and implementation reports; see DigiFinland AuroraAI project page. The Ministry of Finance acted as programme owner and coordinator with working groups for legal, ethical and technical matters. The implementation model emphasised iterative pilots, open procurement of implementation teams, and public consultations to inform both technical and governance decisions.

Monitoring and Evaluation

Monitoring relied on pilot reporting, stakeholder consultations and public metadata on outcomes. Evaluation produced lessons on legal constraints (GDPR and sectoral confidentiality rules), the complexity of cross‑organizational responsibility allocation, and the limits of technical readiness for comprehensive digital twins. External observers and academic studies produced critical reflections and case studies; see OECD/OPSI and academic reviews for independent assessments. The programme documented results from pilots and published evaluation summaries alongside open‑source artifacts to support reproducibility. Monitoring emphasized ethical risk analysis, data protection impact assessments, and continuous user testing for human‑centricity.

Penalties, Liability, and Appeals

AuroraAI itself was a strategic programme (not a binding regulation) and did not create new statutory penalties. Liability and enforcement for services built on AuroraAI components remained governed by existing Finnish and EU law (including GDPR, administrative law and sectoral rules). Where pilot services processed personal data, supervisory authority obligations and infringement regimes under GDPR applied; administrative recourse and appeal channels remained available through standard administrative courts and data protection complaint mechanisms (see the Office of the Data Protection Ombudsman). Programme guidance stressed that implementers must identify legal bases for processing, document accountability chains, and ensure redress pathways for citizens affected by automated recommendations.

Relationship to Other Instruments

AuroraAI linked to Finland’s broader AI strategy and national digital government programmes and was positioned to inform and be informed by EU‑level work (including preparatory work on the AI Act) and OECD guidance on public sector AI. The programme’s documentation and pilots informed government white papers on digital government reform and fed into sectoral policies (health and social care pilots, municipal service design). AuroraAI recommended alignment with GDPR, accessibility law, and public procurement rules; participating agencies emphasised compatibility with existing administrative law and data protection obligations.

International Alignment

AuroraAI engaged with international normative frameworks and shared lessons through OECD, UN and EU channels. Independent case studies (OECD/OPSI, UN DESA compendia) and academic analyses used AuroraAI as an example of national experimentation in human‑centric AI for public services. The programme’s emphasis on open‑model governance, ethical impact assessments and cross‑organizational interoperability was presented as a potential model for other governments while highlighting the need to reconcile national ambitions with EU legal constraints (notably GDPR) and forthcoming harmonised AI rules.

Implementation Timeline

PhaseDatesNotes
Preparatory study2018–02/2019Esiselvityshanke delivered baseline analysis and proposals
Plan & consultations03/2019–12/2019Development and public consultation of the 2019–2023 implementation plan (implementation plan PDF)
Pilots & reference implementations2020–2022Open procurements, municipal pilots, DigiFinland coordinated implementations
Consolidation and reportingLate 2022–early 2023Programme activities wound down; reference results published
Decommissioning & archiving2023Decisions to discontinue active maintenance of certain components announced in 2023; lessons learned events and academic post‑mortems followed

Sources and References

SourceType
Implementation of the national AuroraAI programme (Ministry of Finance)Primary Source
AuroraAI development and implementation plan 2019–2023 (PDF)Primary Source
DigiFinland: AuroraAI project summaryPrimary/Implementation Reporting
OECD/OPSI case study: AuroraAISecondary Analysis
FCAI: Ethics reflections and post‑mortem (Dec 2023)Secondary Analysis

Requirements for a company

What an organisation has to do under Finland - Human-Centric AI Programme, at a glance. Not legal advice — the table below gives the provision and deadline for each item.

Not yet in force (Adopted). These requirements apply once the instrument takes effect and may change before then.

Must do

9
  • Document the GDPR legal basis and Data Protection Impact Assessment.Implementers of services built on AuroraAI components processing personal data.
  • Provide appeals and complaint channels aligned with administrative law.Implementers of services built on AuroraAI components.
  • Designate a responsible agency and contact for each service or component.Agencies implementing services or components using AuroraAI.
  • Complete ethics guidance checklists and publish their outcomes.Implementers of services built on AuroraAI components.
  • Conduct safety, fairness, and usability testing with real users in controlled pilots.Implementers of services built on AuroraAI components.
  • Publish high-level descriptions of algorithms, data sources, and purposes.Implementers of services built on AuroraAI components.
  • +3 more in the table below

Must not do

0

Nothing in this category.

Should do

0

Nothing in this category.

Should not do

0

Nothing in this category.

Who must do what

The obligations under Finland - Human-Centric AI Programme, most serious first. Not legal advice — verify against the official text before relying on it.

#WhoRequirementBy whenWhereSeverity
1Implementers of services built on AuroraAI components processing personal data.Document the GDPR legal basis and Data Protection Impact Assessment.
“Document GDPR basis and DPIA before production deployment”
Before production deploymentCompliance ChecklistCritical
2Implementers of services built on AuroraAI components.Provide appeals and complaint channels aligned with administrative law.
“Provide appeals and complaint channels aligned with administrative law”
—Compliance ChecklistCritical
3Agencies implementing services or components using AuroraAI.Designate a responsible agency and contact for each service or component.
“Designate responsible agency and contact for each service/component”
—Compliance ChecklistImportant
4Implementers of services built on AuroraAI components.Complete ethics guidance checklists and publish their outcomes.
“Complete ethics guidance checklists and publish outcomes”
—Compliance ChecklistImportant
5Implementers of services built on AuroraAI components.Conduct safety, fairness, and usability testing with real users in controlled pilots.
“Conduct safety, fairness and usability testing with real users in controlled pilots”
—Compliance ChecklistImportant
6Implementers of services built on AuroraAI components.Publish high-level descriptions of algorithms, data sources, and purposes.
“Publish high‑level descriptions of algorithms, data sources and purposes”
—Compliance ChecklistImportant
7Implementers of services built on AuroraAI components.Ensure minimal data sharing when designing services and AI components.
“minimal data sharing”
Before placing on marketKey Focus AreasImportant
8Implementers of services built on AuroraAI components.Design AI systems to preserve user autonomy, privacy, and rights.
“AI systems designed to serve individual needs while preserving autonomy, privacy and rights”
Before placing on marketDefinitionsImportant
9Agencies conducting pilots and reference implementations.Document the results and processes of all pilots and reference implementations.
“documentation obligations for pilots”
—Governance and Institutional FrameworkImportant

© Regulations.AI · updated on 20 Sep 2026