Laws and data licensing
Finland call recording laws for AI data licensing
Short answer
Finland has a participant-may-record rule. A participant may record their own conversation; business recording needs notice under GDPR. On top of national law, GDPR applies to every business recording: callers must be told, and reusing recordings for AI training needs its own lawful basis. Recordings are only included in a license if both tests are met.
In short
- Country
- Finland
- National recording rule
- participant-may-record rule
- Also applies
- EU GDPR: callers must be told, and reuse for AI training needs its own lawful basis
- Note
- A participant may record their own conversation; business recording needs notice under GDPR.
- Last reviewed
- 2026-10-09
- 01Your work records
- 02Personal details removed
- 03You approve the release
- 04Licensed to AI developers
What this means#
- National criminal law is less strict, but GDPR still requires a clear notice
- If the other caller is in a stricter country, the stricter rule may apply
- Employee recordings may need works council or staff consultation
Before licensing recordings#
- Confirm callers were told the call was recorded and why
- Check whether your notice or lawful basis covers reuse for AI training
- Remove names, voices linked to people and personal details from transcripts
- Voiceprints are biometric data under GDPR and are usually excluded
Frequently asked questions
What is the rule for recording calls in Finland?
Finland has a participant-may-record rule. A participant may record their own conversation; business recording needs notice under GDPR.
Does GDPR apply to call recordings in Finland as well?
Yes. On top of national law, GDPR applies to every business recording: callers must be told, and reusing recordings for AI training needs its own lawful basis. A recording is only included in a license if both tests are met.
What is removed before Finland call recordings are licensed?
Names, voices linked to people and personal details are removed from transcripts, and voiceprints, which are biometric data under GDPR, are usually excluded.
General information, not legal advice. Laws change and their application depends on your facts. SourceX assesses which rules apply deal by deal with your counsel. Last reviewed 2026-10-09.