Finland - AI in Health Sector

Hyteairo — Well-being and Health Sector’s Artificial Intelligence and Robotics Programme

Hyteairo — Well‑being and Health Sector’s Artificial Intelligence and Robotics Programme

Finland

RAI-FI-NA-HWHSAXX-2020
Effective: August 23, 2018
In Force(In Force)
PolicyGovernance and OversightRisk ManagementData Protection and Privacy
Export PDF

Hyteairo (the Well‑being and Health Sector’s Artificial Intelligence and Robotics Programme) is a Finnish government sectoral programme launched to accelerate and coordinate the uptake of artificial intelligence (AI) and robotics across social and health services. Led by the Ministry of Social Affairs and Health (STM) and coordinated with the Finnish Institute for Health and Welfare (THL), Hyteairo focused on use cases such as living at home, conversational AI, AI analytics and established programmatic deliverables including the KATI model and guidance for Digi‑HTA and testbeds.

Summary

Hyteairo (Hyvinvoinnin tekoäly ja robotiikka) is a national programme initiated by the Finnish Ministry of Social Affairs and Health to accelerate the responsible and effective uptake of artificial intelligence and robotics in the well‑being and health sector. Operating as a collaborative, cross‑stakeholder network rather than a single regulatory instrument, Hyteairo ran as a coordinating programme (original programme activity began in 2018 and produced a formal final report covering 2018–2021). Its core objectives were to identify and remove barriers to deployment, to formulate national operating models for home care and related services (notably the KATI model), to stimulate sectoral ecosystems (testbeds, networks, business development) and to align national practice with EU and international standards and guidance.

The programme emphasised user‑centred design, interoperability, ethical use, data protection, security, and the generation of evidence to underpin safe adoption in clinical and social care contexts. Hyteairo supported development streams including: (1) living at home (technologies to support independent living and remote monitoring); (2) conversational AI in social and health care (chatbots and digital triage); and (3) AI analytics (data‑driven service planning and decision support). It also coordinated activities across government ministries, regional wellbeing service counties, research organisations and industry to create testbeds, pilot projects and guidance tools such as Digi‑HTA (the digital health technology assessment framework used in Finland for assessing digital health tools).

Hyteairo did not function as a formal, binding law that imposes sanctions; rather it issued strategic guidance, reports, implementation models and coordination functions intended to steer public sector procurement, local pilot implementation and national policy. Several outputs of the programme were actionable recommendations: integration of Digi‑HTA into procurement and evaluation processes; creation of technical and organisational preconditions for safe data use; a focus on skills and workforce development; and recommended governance arrangements for local testbeds and procurement. The programme’s final report and associated materials were published by the Ministry and the Finnish Institute for Health and Welfare (THL) and are used as primary references for ongoing regional activities and sectoral implementation.

Because Hyteairo is a strategy/programme (not a single regulatory statute), its influence on compliance is typically indirect: organisations implementing AI/robotics in health and social care must follow binding laws (e.g., GDPR, Medical Devices Regulation, national Health Care Act) while following Hyteairo guidance for best practice, assessment (Digi‑HTA), testing and user involvement. The programme also emphasises international alignment (EU AI policy, standards, and cross‑border research), and the creation of test environments and data governance models to enable secure, ethical innovation. Official primary sources include the programme final report and related programme pages published by Finnish government and THL. For the programme final report see the Ministry/THL publication archive. Example official references used by researchers and implementers include the programme final report and the THL programme pages.

Full article

Read full text ↗

Overview

The Well‑being and Health Sector’s Artificial Intelligence and Robotics Programme (Hyteairo, or Hyvinvoinnin tekoäly ja robotiikka) is a Finnish Government sector programme led by the Ministry of Social Affairs and Health (STM) and coordinated operationally with the Finnish Institute for Health and Welfare (THL). The programme was initiated in 2018 to accelerate the safe, ethical and evidence‑based use of AI and robotics across social and health services, with an emphasis on practical implementation in home care, conversational AI and analytics. Hyteairo operated as a national coordination and facilitation platform — convening public authorities, regional wellbeing service counties, research organisations, testbeds and private sector actors — and produced strategic deliverables, operating models (including the KATI model for tech‑enabled home living), and a final programme report. See the official programme final report and archive record: Hyteairo — final report (Julkari, THL/STM).

Definitions

For the purpose of this programme and the guidance it produced: "AiRo" (AiRo technologies) denotes combined uses of artificial intelligence and robotics in social and health contexts; "KATI" denotes the model/package for technology supporting living at home; "Digi‑HTA" denotes the health technology assessment framework adapted for digital health technologies; "wellbeing service counties" denotes Finland's regional health and social service authorities; and "testbeds" denotes controlled real‑world environments established for piloting and evaluating AI/robotics solutions. The programme materials define risk categories in sectoral terms (clinical decision support, autonomous physical assistance, remote monitoring etc.) and emphasise conformance with existing legal definitions (medical device vs non‑medical health IT) and GDPR implications.

Governance and Institutional Framework

Hyteairo was structured as a cross‑sector programme rather than a single regulatory act. Overall political stewardship rested with the Ministry of Social Affairs and Health (STM) while THL provided operational coordination, subject matter expertise and knowledge dissemination. The programme established thematic working groups and networks that included representatives from ministries (STM and others), THL, wellbeing service counties, municipalities, research institutions (e.g., University of Oulu, VTT), industry partners and civil society. Hyteairo emphasised distributed governance: national guidance documents and operating models (such as the KATI model) were set out for regional adoption, and the programme recommended that local implementers establish clear roles for procurement, clinical governance, data protection officers, and user‑involvement structures. For official programme documentation and institutional references see the programme archive and associated ministry publications: Hyteairo final report and the Ministry publication record Valto STM Hyteairo record.

Key Focus Areas

Hyteairo organised its activity around a small number of high‑impact focus areas to align sectoral needs with technological capability and market development. The principal focus areas were: (1) Living at home — assistive technologies, remote monitoring and coordinated service packages to enable safe independent living; (2) Conversational AI — chatbots and triage systems for social and health service navigation, counselling and guidance; (3) AI analytics — population‑level analytics, service planning and resource optimisation. Cross‑cutting priorities included interoperability, ethical design, accessibility, inclusion of vulnerable groups, data governance and demonstration of clinical or social value through Digi‑HTA. Hyteairo also promoted the development of testbeds, common data models and procurement guidance to reduce fragmentation and support scale‑up. Key sector partners (research institutions, regions, companies) are named across programme documentation and were engaged in pilot projects and assessments documented in the final report and ancillary outputs (programme archive).

Implementation Framework

Hyteairo's implementation approach combined networked coordination with targeted instruments: thematic networks and working groups to identify obstacles and create guidance; support for regional pilot projects and testbeds (to evaluate real‑world performance); development and dissemination of assessment tools (notably Digi‑HTA) to support procurement and clinical evaluation; and promotion of interoperability and security best practices. The programme deliberately avoided direct project financing for AI/robotics development, preferring to act as a convenor and platform to channel public and private funding into coordinated pilots. Operational recommendations included embedding Digi‑HTA workflows into procurement, creating local clinical governance structures, mandatory data protection impact assessments for high‑risk uses, and creating accessible reporting flows between local implementers and national authorities. See THL and related testbed documentation and Digi‑HTA guidance for operational detail (Hyteairo final report, Digi‑HTA overview).

Monitoring and Evaluation

Hyteairo recommended continuous monitoring and evaluation that combines quantitative outcomes (safety incidents, clinical outcomes, cost metrics) with qualitative user‑experience evidence and implementation process measures. The programme promoted use of Digi‑HTA criteria to standardise evidence collection and recommended national reporting templates to aggregate learning across pilot sites. Monitoring responsibilities were mainly local (wellbeing service counties and pilot owners), with THL acting as the national aggregator of lessons learned and STM providing political oversight. The programme final report described an evaluation horizon spanning immediate pilot evaluation (2018–2021), medium‑term integration (2021–2025) and longer‑term regulatory/practice alignment (post‑2025), recommending iterative updating of national guidance based on empirical findings (final report).

Penalties, Liability, and Appeals

Hyteairo is a strategic programme and does not itself create a bespoke penalty regime. Instead, implementers are required to comply with binding laws and regulations (e.g., EU General Data Protection Regulation, EU Medical Devices Regulation (MDR) where applicable, national Health Care Act and patient safety rules). Liability for harm caused by deployed systems remains governed by existing civil liability, product liability and professional liability frameworks. The programme explicitly advised implementers to identify legal responsibilities early (manufacturers, procuring authority, service provider) and to ensure appropriate insurance, clinical governance and redress pathways for service users. Where governance gaps were identified, Hyteairo recommended that regulators and ministries consider statutory clarification; however formal enforcement remains with sectoral regulators and courts under existing law. For programme recommendations and legal context, see the final report and ministry materials (Hyteairo final report).

Relationship to Other Instruments

Hyteairo sits alongside a broader Finnish AI and digital health policy landscape (including the national AI strategies, the Artificial Intelligence 4.0 programme, Aurora AI initiatives and Business Finland innovation programs). It complements technical standards, Digi‑HTA assessment processes and national testbeds, and explicitly references EU‑level instruments (MDR, GDPR, EU AI policy work). The programme recommended integration of Digi‑HTA into local procurement, alignment with medical device classification processes where applicable, and coordination with national interoperability initiatives and data governance frameworks. Cross‑references and links to related national and EU instruments are provided throughout the programme documentation (AI Watch Finland summary, Hyteairo final report).

International Alignment

Hyteairo emphasised alignment with EU policy and international standardisation to promote safe deployment and to support export opportunities for Finnish AiRo companies. The programme recommended participation in EU research and standardisation fora, adoption of EU technical standards for interoperability and security, and harmonisation of Digi‑HTA approaches with international HTA and regulatory science advances. Hyteairo explicitly sought to position Finnish technologies for EU markets while ensuring compliance with GDPR and MDR. Official programme documents and national strategy summaries describe this international orientation and coordination with EU initiatives (AI Watch: Finland, Hyteairo final report).

Implementation Timeline

EventDateNotes
Programme launch (STM Hyteairo inception)2018-08-23Programme inception and network formation (STM coordination).
Operational activity / pilot start2018–2021Multiple regional pilots, testbeds and working groups active.
KATI model and regional implementations2020Workstreams and regional projects to support living at home.
Digi‑HTA adoption / process development2019–2020Framework developed and disseminated for digital health assessment.
Programme final report published2022-02-16Final programme report summarises outputs and continuation paths (Julkari).

Sources and References

SourceType
Hyteairo — Hyvinvoinnin tekoäly ja robotiikka -ohjelma : loppuraportti 2022 (Julkari / THL/STM)Primary Source
Hyvinvoinnin AiRo‑ohjelma #hyteairo (Valtioneuvoston julkaisuarkisto / STM record)Primary Source
Finnish Institute for Health and Welfare (THL) — programme pages and resourcesPrimary / Official
European Commission / AI Watch — Finland AI strategy and references to HyteairoSecondary Official

Requirements for a company

What an organisation has to do under Finland - AI in Health Sector, at a glance. Not legal advice — the table below gives the provision and deadline for each item.

Must do

10
  • Comply with all binding laws and regulations, including GDPR and MDR.Implementers of AI/robotics in social and health services.
  • Complete a Data Protection Impact Assessment (DPIA) for high-risk AI system uses.Implementers and data controllers of high-risk AI systems.
  • Conduct a Digi-HTA prior to procurement or large-scale deployment of AI/robotics.Procurement authorities and service providers.
  • Establish local clinical governance structures and accessible incident reporting flows.Health providers and wellbeing service counties.
  • Establish clear roles for procurement, clinical governance, DPOs, and user-involvement structures.Local implementers of AI/robotics solutions.
  • Identify legal responsibilities early and ensure appropriate insurance and redress pathways.Implementers (manufacturers, procuring authority, service provider).
  • +4 more in the table below

Must not do

0

Nothing in this category.

Should do

2
  • Use Digi-HTA criteria and national reporting templates for standardized evidence collection.Local implementers and pilot sites.
  • Adopt EU technical standards for interoperability and security in AI/robotics solutions.Finnish AiRo companies and implementers.

Should not do

0

Nothing in this category.

Who must do what

The obligations under Finland - AI in Health Sector, most serious first. Not legal advice — verify against the official text before relying on it.

#WhoRequirementBy whenWhereSeverity
1Implementers of AI/robotics in social and health services.Comply with all binding laws and regulations, including GDPR and MDR.
implementers are required to comply with binding laws and regulations (e.g., EU General Data Protection Regulation, EU Medical Devices Regulation (MDR) where applicable)
Penalties, Liability, and AppealsCritical
2Implementers and data controllers of high-risk AI systems.Complete a Data Protection Impact Assessment (DPIA) for high-risk AI system uses.
mandatory data protection impact assessments for high‑risk uses
Implementation FrameworkCritical
3Procurement authorities and service providers.Conduct a Digi-HTA prior to procurement or large-scale deployment of AI/robotics.
Conduct Digi‑HTA prior to procurement or large‑scale deployment
Before procurement or deploymentCompliance ChecklistImportant
4Health providers and wellbeing service counties.Establish local clinical governance structures and accessible incident reporting flows.
creating local clinical governance structures, mandatory data protection impact assessments for high‑risk uses, and creating accessible reporting flows
Implementation FrameworkImportant
5Local implementers of AI/robotics solutions.Establish clear roles for procurement, clinical governance, DPOs, and user-involvement structures.
the programme recommended that local implementers establish clear roles for procurement, clinical governance, data protection officers, and user‑involvement structures.
Governance and Institutional FrameworkImportant
6Implementers (manufacturers, procuring authority, service provider).Identify legal responsibilities early and ensure appropriate insurance and redress pathways.
The programme explicitly advised implementers to identify legal responsibilities early... and to ensure appropriate insurance, clinical governance and redress pathways
Before deploymentPenalties, Liability, and AppealsImportant
7Developers and implementers of AiRo technologies.Align with medical device classification processes where applicable for AiRo technologies.
emphasise conformance with existing legal definitions (medical device vs non‑medical health IT) and GDPR implications.
DefinitionsImportant
8Solution developers and service designers.Engage end users and vulnerable groups in the design of AI/robotics solutions.
Cross-cutting priorities included interoperability, ethical design, accessibility, inclusion of vulnerable groups
Key Focus AreasImportant
9Vendors and IT units deploying AI/robotics.Ensure a cybersecurity baseline and secure data flows for all AI/robotics systems.
promotion of interoperability and security best practices
Implementation FrameworkImportant
10Wellbeing service counties and pilot owners.Conduct continuous monitoring and evaluation, combining quantitative and qualitative outcomes.
Hyteairo recommended continuous monitoring and evaluation that combines quantitative outcomes... with qualitative user‑experience evidence
Monitoring and EvaluationImportant
11Local implementers and pilot sites.Use Digi-HTA criteria and national reporting templates for standardized evidence collection.
The programme promoted use of Digi‑HTA criteria to standardise evidence collection and recommended national reporting templates
Monitoring and EvaluationRecommended
12Finnish AiRo companies and implementers.Adopt EU technical standards for interoperability and security in AI/robotics solutions.
adoption of EU technical standards for interoperability and security
International AlignmentRecommended

© Regulations.AI · updated on 13-Jun-2026