Criminal framework

Rikoslaki 24 luku 8a § (dissemination of information violating personal privacy). The statute was Original 2000, reformed 2014 and 2023. Fine or imprisonment up to 2 years.

Civil and data protection framework

GDPR Article 17 (right to erasure) plus Tietosuojalaki provides the parallel civil route. Tietosuojavaltuutetun toimisto (Office of the Data Protection Ombudsman) (Tietosuojavaltuutettu) is the national supervisory authority and accepts complaints against any controller processing intimate imagery without lawful basis. The official site is https://tietosuoja.fi.

Official victim support

Nettivihje is the recognised support service. Available at https://www.pelastakaalapset.fi/nettivihje.

Five step removal process for Finland victims

  1. 1

    Preserve evidence before any contact with the perpetrator

    Capture full page screenshots with URLs visible. Save the original files. Note timestamps. This evidence supports both the Rikoslaki 24:8a (yksityiselämää loukkaava tiedon levittäminen) complaint and any GDPR Article 17 (right to erasure) plus Tietosuojalaki request.

  2. 2

    File a criminal complaint under Rikoslaki 24:8a (yksityiselämää loukkaava tiedon levittäminen)

    Report to local police or the national cybercrime unit. Nettivihje can assist with the report.

  3. 3

    Submit an erasure request under GDPR Article 17 (right to erasure) plus Tietosuojalaki

    Send a written request to each platform's designated data protection contact citing the legal basis. Tietosuojavaltuutettu can be petitioned if the platform fails to comply within 30 days.

  4. 4

    Send a US TAKE IT DOWN Act notice in parallel for covered platforms

    When the platform is subject to US jurisdiction, the 48 hour federal removal obligation applies in parallel with your domestic rights. ScanErase files these notices automatically.

  5. 5

    Track and escalate non compliant platforms

    Document every notice and every response. Escalate non compliant platforms through the regulator complaint process.

Frequently asked questions

What is the criminal NCII statute in Finland?

Rikoslaki 24 luku 8a § (dissemination of information violating personal privacy). Enacted Original 2000, reformed 2014 and 2023. Fine or imprisonment up to 2 years.

Who enforces data protection rights in Finland?

Tietosuojavaltuutetun toimisto (Office of the Data Protection Ombudsman) (Tietosuojavaltuutettu) is the national authority. Official site: https://tietosuoja.fi.

Is there an official victim support service in Finland?

Yes. Nettivihje provides direct help to victims. Site: https://www.pelastakaalapset.fi/nettivihje.

Can a Finland resident also use the US TAKE IT DOWN Act?

Yes when the hosting platform is subject to US jurisdiction. The TAKE IT DOWN Act applies to covered platforms regardless of where the victim resides. ScanErase's scan finds every US covered platform hosting your images, so you can file notices there in parallel with GDPR Article 17 (right to erasure) plus Tietosuojalaki requests.

Related guides