Finland - AI in Health Sector
Hyteairo — Well-being and Health Sector’s Artificial Intelligence and Robotics Programme
Hyteairo — Well‑being and Health Sector’s Artificial Intelligence and Robotics Programme
Finland
RAI-FI-NA-HWHSAXX-2020Hyteairo (the Well‑being and Health Sector’s Artificial Intelligence and Robotics Programme) is a Finnish government sectoral programme launched to accelerate and coordinate the uptake of artificial intelligence (AI) and robotics across social and health services. Led by the Ministry of Social Affairs and Health (STM) and coordinated with the Finnish Institute for Health and Welfare (THL), Hyteairo focused on use cases such as living at home, conversational AI, AI analytics and established programmatic deliverables including the KATI model and guidance for Digi‑HTA and testbeds.
Summary
Hyteairo (Hyvinvoinnin tekoäly ja robotiikka) is a national programme initiated by the Finnish Ministry of Social Affairs and Health to accelerate the responsible and effective uptake of artificial intelligence and robotics in the well‑being and health sector. Operating as a collaborative, cross‑stakeholder network rather than a single regulatory instrument, Hyteairo ran as a coordinating programme (original programme activity began in 2018 and produced a formal final report covering 2018–2021). Its core objectives were to identify and remove barriers to deployment, to formulate national operating models for home care and related services (notably the KATI model), to stimulate sectoral ecosystems (testbeds, networks, business development) and to align national practice with EU and international standards and guidance.
The programme emphasised user‑centred design, interoperability, ethical use, data protection, security, and the generation of evidence to underpin safe adoption in clinical and social care contexts. Hyteairo supported development streams including: (1) living at home (technologies to support independent living and remote monitoring); (2) conversational AI in social and health care (chatbots and digital triage); and (3) AI analytics (data‑driven service planning and decision support). It also coordinated activities across government ministries, regional wellbeing service counties, research organisations and industry to create testbeds, pilot projects and guidance tools such as Digi‑HTA (the digital health technology assessment framework used in Finland for assessing digital health tools).
Hyteairo did not function as a formal, binding law that imposes sanctions; rather it issued strategic guidance, reports, implementation models and coordination functions intended to steer public sector procurement, local pilot implementation and national policy. Several outputs of the programme were actionable recommendations: integration of Digi‑HTA into procurement and evaluation processes; creation of technical and organisational preconditions for safe data use; a focus on skills and workforce development; and recommended governance arrangements for local testbeds and procurement. The programme’s final report and associated materials were published by the Ministry and the Finnish Institute for Health and Welfare (THL) and are used as primary references for ongoing regional activities and sectoral implementation.
Because Hyteairo is a strategy/programme (not a single regulatory statute), its influence on compliance is typically indirect: organisations implementing AI/robotics in health and social care must follow binding laws (e.g., GDPR, Medical Devices Regulation, national Health Care Act) while following Hyteairo guidance for best practice, assessment (Digi‑HTA), testing and user involvement. The programme also emphasises international alignment (EU AI policy, standards, and cross‑border research), and the creation of test environments and data governance models to enable secure, ethical innovation. Official primary sources include the programme final report and related programme pages published by Finnish government and THL. For the programme final report see the Ministry/THL publication archive. Example official references used by researchers and implementers include the programme final report and the THL programme pages.
Full article
Read full text ↗Overview
The Well‑being and Health Sector’s Artificial Intelligence and Robotics Programme (Hyteairo, or Hyvinvoinnin tekoäly ja robotiikka) is a Finnish Government sector programme led by the Ministry of Social Affairs and Health (STM) and coordinated operationally with the Finnish Institute for Health and Welfare (THL). The programme was initiated in 2018 to accelerate the safe, ethical and evidence‑based use of AI and robotics across social and health services, with an emphasis on practical implementation in home care, conversational AI and analytics. Hyteairo operated as a national coordination and facilitation platform — convening public authorities, regional wellbeing service counties, research organisations, testbeds and private sector actors — and produced strategic deliverables, operating models (including the KATI model for tech‑enabled home living), and a final programme report. See the official programme final report and archive record: Hyteairo — final report (Julkari, THL/STM).
Definitions
For the purpose of this programme and the guidance it produced: "AiRo" (AiRo technologies) denotes combined uses of artificial intelligence and robotics in social and health contexts; "KATI" denotes the model/package for technology supporting living at home; "Digi‑HTA" denotes the health technology assessment framework adapted for digital health technologies; "wellbeing service counties" denotes Finland's regional health and social service authorities; and "testbeds" denotes controlled real‑world environments established for piloting and evaluating AI/robotics solutions. The programme materials define risk categories in sectoral terms (clinical decision support, autonomous physical assistance, remote monitoring etc.) and emphasise conformance with existing legal definitions (medical device vs non‑medical health IT) and GDPR implications.
Governance and Institutional Framework
Hyteairo was structured as a cross‑sector programme rather than a single regulatory act. Overall political stewardship rested with the Ministry of Social Affairs and Health (STM) while THL provided operational coordination, subject matter expertise and knowledge dissemination. The programme established thematic working groups and networks that included representatives from ministries (STM and others), THL, wellbeing service counties, municipalities, research institutions (e.g., University of Oulu, VTT), industry partners and civil society. Hyteairo emphasised distributed governance: national guidance documents and operating models (such as the KATI model) were set out for regional adoption, and the programme recommended that local implementers establish clear roles for procurement, clinical governance, data protection officers, and user‑involvement structures. For official programme documentation and institutional references see the programme archive and associated ministry publications: Hyteairo final report and the Ministry publication record Valto STM Hyteairo record.
Key Focus Areas
Hyteairo organised its activity around a small number of high‑impact focus areas to align sectoral needs with technological capability and market development. The principal focus areas were: (1) Living at home — assistive technologies, remote monitoring and coordinated service packages to enable safe independent living; (2) Conversational AI — chatbots and triage systems for social and health service navigation, counselling and guidance; (3) AI analytics — population‑level analytics, service planning and resource optimisation. Cross‑cutting priorities included interoperability, ethical design, accessibility, inclusion of vulnerable groups, data governance and demonstration of clinical or social value through Digi‑HTA. Hyteairo also promoted the development of testbeds, common data models and procurement guidance to reduce fragmentation and support scale‑up. Key sector partners (research institutions, regions, companies) are named across programme documentation and were engaged in pilot projects and assessments documented in the final report and ancillary outputs (programme archive).
Implementation Framework
Hyteairo's implementation approach combined networked coordination with targeted instruments: thematic networks and working groups to identify obstacles and create guidance; support for regional pilot projects and testbeds (to evaluate real‑world performance); development and dissemination of assessment tools (notably Digi‑HTA) to support procurement and clinical evaluation; and promotion of interoperability and security best practices. The programme deliberately avoided direct project financing for AI/robotics development, preferring to act as a convenor and platform to channel public and private funding into coordinated pilots. Operational recommendations included embedding Digi‑HTA workflows into procurement, creating local clinical governance structures, mandatory data protection impact assessments for high‑risk uses, and creating accessible reporting flows between local implementers and national authorities. See THL and related testbed documentation and Digi‑HTA guidance for operational detail (Hyteairo final report, Digi‑HTA overview).
Monitoring and Evaluation
Hyteairo recommended continuous monitoring and evaluation that combines quantitative outcomes (safety incidents, clinical outcomes, cost metrics) with qualitative user‑experience evidence and implementation process measures. The programme promoted use of Digi‑HTA criteria to standardise evidence collection and recommended national reporting templates to aggregate learning across pilot sites. Monitoring responsibilities were mainly local (wellbeing service counties and pilot owners), with THL acting as the national aggregator of lessons learned and STM providing political oversight. The programme final report described an evaluation horizon spanning immediate pilot evaluation (2018–2021), medium‑term integration (2021–2025) and longer‑term regulatory/practice alignment (post‑2025), recommending iterative updating of national guidance based on empirical findings (final report).
Penalties, Liability, and Appeals
Hyteairo is a strategic programme and does not itself create a bespoke penalty regime. Instead, implementers are required to comply with binding laws and regulations (e.g., EU General Data Protection Regulation, EU Medical Devices Regulation (MDR) where applicable, national Health Care Act and patient safety rules). Liability for harm caused by deployed systems remains governed by existing civil liability, product liability and professional liability frameworks. The programme explicitly advised implementers to identify legal responsibilities early (manufacturers, procuring authority, service provider) and to ensure appropriate insurance, clinical governance and redress pathways for service users. Where governance gaps were identified, Hyteairo recommended that regulators and ministries consider statutory clarification; however formal enforcement remains with sectoral regulators and courts under existing law. For programme recommendations and legal context, see the final report and ministry materials (Hyteairo final report).
Relationship to Other Instruments
Hyteairo sits alongside a broader Finnish AI and digital health policy landscape (including the national AI strategies, the Artificial Intelligence 4.0 programme, Aurora AI initiatives and Business Finland innovation programs). It complements technical standards, Digi‑HTA assessment processes and national testbeds, and explicitly references EU‑level instruments (MDR, GDPR, EU AI policy work). The programme recommended integration of Digi‑HTA into local procurement, alignment with medical device classification processes where applicable, and coordination with national interoperability initiatives and data governance frameworks. Cross‑references and links to related national and EU instruments are provided throughout the programme documentation (AI Watch Finland summary, Hyteairo final report).
International Alignment
Hyteairo emphasised alignment with EU policy and international standardisation to promote safe deployment and to support export opportunities for Finnish AiRo companies. The programme recommended participation in EU research and standardisation fora, adoption of EU technical standards for interoperability and security, and harmonisation of Digi‑HTA approaches with international HTA and regulatory science advances. Hyteairo explicitly sought to position Finnish technologies for EU markets while ensuring compliance with GDPR and MDR. Official programme documents and national strategy summaries describe this international orientation and coordination with EU initiatives (AI Watch: Finland, Hyteairo final report).
Implementation Timeline
| Event | Date | Notes |
|---|---|---|
| Programme launch (STM Hyteairo inception) | 2018-08-23 | Programme inception and network formation (STM coordination). |
| Operational activity / pilot start | 2018–2021 | Multiple regional pilots, testbeds and working groups active. |
| KATI model and regional implementations | 2020 | Workstreams and regional projects to support living at home. |
| Digi‑HTA adoption / process development | 2019–2020 | Framework developed and disseminated for digital health assessment. |
| Programme final report published | 2022-02-16 | Final programme report summarises outputs and continuation paths (Julkari). |
Sources and References
Requirements for a company
What an organisation has to do under Finland - AI in Health Sector, at a glance. Not legal advice — the table below gives the provision and deadline for each item.
Must do
10- Comply with all binding laws and regulations, including GDPR and MDR.Implementers of AI/robotics in social and health services.
- Complete a Data Protection Impact Assessment (DPIA) for high-risk AI system uses.Implementers and data controllers of high-risk AI systems.
- Conduct a Digi-HTA prior to procurement or large-scale deployment of AI/robotics.Procurement authorities and service providers.
- Establish local clinical governance structures and accessible incident reporting flows.Health providers and wellbeing service counties.
- Establish clear roles for procurement, clinical governance, DPOs, and user-involvement structures.Local implementers of AI/robotics solutions.
- Identify legal responsibilities early and ensure appropriate insurance and redress pathways.Implementers (manufacturers, procuring authority, service provider).
- +4 more in the table below
Must not do
0Nothing in this category.
Should do
2- Use Digi-HTA criteria and national reporting templates for standardized evidence collection.Local implementers and pilot sites.
- Adopt EU technical standards for interoperability and security in AI/robotics solutions.Finnish AiRo companies and implementers.
Should not do
0Nothing in this category.
Who must do what
The obligations under Finland - AI in Health Sector, most serious first. Not legal advice — verify against the official text before relying on it.
| # | Who | Requirement | By when | Where | Severity |
|---|---|---|---|---|---|
| 1 | Implementers of AI/robotics in social and health services. | Comply with all binding laws and regulations, including GDPR and MDR. “implementers are required to comply with binding laws and regulations (e.g., EU General Data Protection Regulation, EU Medical Devices Regulation (MDR) where applicable)” | — | Penalties, Liability, and Appeals | Critical |
| 2 | Implementers and data controllers of high-risk AI systems. | Complete a Data Protection Impact Assessment (DPIA) for high-risk AI system uses. “mandatory data protection impact assessments for high‑risk uses” | — | Implementation Framework | Critical |
| 3 | Procurement authorities and service providers. | Conduct a Digi-HTA prior to procurement or large-scale deployment of AI/robotics. “Conduct Digi‑HTA prior to procurement or large‑scale deployment” | Before procurement or deployment | Compliance Checklist | Important |
| 4 | Health providers and wellbeing service counties. | Establish local clinical governance structures and accessible incident reporting flows. “creating local clinical governance structures, mandatory data protection impact assessments for high‑risk uses, and creating accessible reporting flows” | — | Implementation Framework | Important |
| 5 | Local implementers of AI/robotics solutions. | Establish clear roles for procurement, clinical governance, DPOs, and user-involvement structures. “the programme recommended that local implementers establish clear roles for procurement, clinical governance, data protection officers, and user‑involvement structures.” | — | Governance and Institutional Framework | Important |
| 6 | Implementers (manufacturers, procuring authority, service provider). | Identify legal responsibilities early and ensure appropriate insurance and redress pathways. “The programme explicitly advised implementers to identify legal responsibilities early... and to ensure appropriate insurance, clinical governance and redress pathways” | Before deployment | Penalties, Liability, and Appeals | Important |
| 7 | Developers and implementers of AiRo technologies. | Align with medical device classification processes where applicable for AiRo technologies. “emphasise conformance with existing legal definitions (medical device vs non‑medical health IT) and GDPR implications.” | — | Definitions | Important |
| 8 | Solution developers and service designers. | Engage end users and vulnerable groups in the design of AI/robotics solutions. “Cross-cutting priorities included interoperability, ethical design, accessibility, inclusion of vulnerable groups” | — | Key Focus Areas | Important |
| 9 | Vendors and IT units deploying AI/robotics. | Ensure a cybersecurity baseline and secure data flows for all AI/robotics systems. “promotion of interoperability and security best practices” | — | Implementation Framework | Important |
| 10 | Wellbeing service counties and pilot owners. | Conduct continuous monitoring and evaluation, combining quantitative and qualitative outcomes. “Hyteairo recommended continuous monitoring and evaluation that combines quantitative outcomes... with qualitative user‑experience evidence” | — | Monitoring and Evaluation | Important |
| 11 | Local implementers and pilot sites. | Use Digi-HTA criteria and national reporting templates for standardized evidence collection. “The programme promoted use of Digi‑HTA criteria to standardise evidence collection and recommended national reporting templates” | — | Monitoring and Evaluation | Recommended |
| 12 | Finnish AiRo companies and implementers. | Adopt EU technical standards for interoperability and security in AI/robotics solutions. “adoption of EU technical standards for interoperability and security” | — | International Alignment | Recommended |
Related Regulations
Artificial Intelligence Programme (National AI Programme)
Finland91% similar
Finland’s Age of Artificial Intelligence
Finland89% similar
AuroraAI (National AI programme for human‑centric public services)
Finland89% similar
Artificial Intelligence 4.0 Programme
Finland89% similar
Status and proposals for further work with artificial intelligence (KI) in the health and care services (Status og forslag til videre arbeid med kunstig intelligens i helse- og omsorgstjenesten)
Norway87% similar
© Regulations.AI · updated on 13-Jun-2026