Encryption Law by Country
Where strong encryption is a right, restricted, or compelled. National law and policy, mirrored per country.
Source: Global Partners Digital, World Map of Encryption, updated 2026-07-02. Full data at www.gp-digital.org/world-map-of-encryption
Encryption Law by Country (196)
General right to encryption
Section 6 of the Law on the Protection of Privacy in Electronic Communications (Law 516/2004) provides that subscribers and users of electronic communication services have the right to protect their communications and identification information how the wish, using any technical possibilities available, unless otherwise provided by law. A copy of the law (in Finnish) can be found here .
Mandatory minimum or maximum encryption strength
No known legislation or policies.
Licensing/registration requirements
No known legislation or policies.
Import/export controls
No known legislation or policies.
Other restrictions
No known legislation or policies.
Obligations on individuals to assist authorities
Section 23 of Chapter 8 of the Law on Coercive Measures Act provides that persons (including persons who maintain information systems) other than suspects/accused persons can be required to hand over passwords and decryption keys if it is necessary to conduct a search of data contained in a device. A copy of the law (in Finnish) can be found here .
Obligations on providers to assist authorities
Section 23 of Chapter 8 of the Law on Coercive Measures Act provides that persons (including persons who maintain information systems) other than suspects/accused persons can be required to hand over passwords and decryption keys if it is necessary to conduct a search of data contained in a device. A copy of the law (in Finnish) can be found here .
Assessment Text Area
In Finland, everyone has the right to protect their communications and identification information how the wish, using any technical possibilities available, unless otherwise provided by law. However, the law also requires anyone to hand over passwords and decryption keys if it is necessary to conduct a search of data contained in a device during the course of a criminal investigation.
Murphy's Law