The new act on the export control of dual-use items entered into force on 15 September 2024. National export control legislation on dual-use items supplements and supports the application of the EU Export Control Regulation where necessary. The main reform introduced by the new act is a national control list of dual-use items that require an export authorisation for exporting outside the EU.
10.10.2024
New act on dual-use items entered into force in September – what companies need to know
Kim Parviainen & Lauri Laatunen
Related services
Tags
The new act on dual-use items supplements the EU Export Control Regulation
Export control of dual-use items in the EU is based on the Export Control Regulation that has been in force since September 2021. In the regulation, ‘dual-use items’ refers to items that can be used for both civilian and military purposes. A dual-use item can be a tangible item or an intangible item, such as software.
On 16 August 2024, the President of the Republic of Finland approved the new act on export control of dual-use items as well as amendments to the provisions in chapter 46 of the Criminal Code of Finland to sanction the breach of the obligations laid down in the act on dual-use items. The amendments were made to the provisions concerning regulation offences and failure to file an export control notification of dual-use items. The new act on dual-use items replaces the previous act that had been in force since 1996 and constitutes the national legislation that supplements the application of the Export Control Regulation.
The Export Control Regulation leaves some key aspects of the practical implementation of export control to be set out in national legislation. These include in particular authorities’ responsibilities, control measures, imposition of sanctions and some matters relating to authorisation requirements and notification obligations. Member States can also prohibit or impose an authorisation requirement on the export of dual-use items not listed in the Export Control Regulation for reasons of public security, including the prevention of acts of terrorism, or for human rights considerations.
A national control list improves the efficiency of export control by responding to rapid technological advancements and hybrid threats
The purpose of the act on dual-use items is to ensure efficient export control. A national control list is appended to the act. Export of the listed dual-use items from Finland to outside of the EU is controlled by an export authorisation procedure administrated by the Ministry for Foreign Affairs of Finland. By assessing the end-use and end-users of dual-use items in advance in accordance with the criteria laid down in the Export Control Regulation, the national export authorisation procedure helps to prevent these items ending up in unwanted uses.
When enacting the act, the Finnish Government deemed it necessary to adopt a national control list as the earlier approach that was based on international export control regimes is not fit for purpose in the current international environment. The national control list is needed as rapid technological advancements and an increase in hybrid threats require an efficient export control framework and an ability to act nationally in matters relevant to Finland’s comprehensive security. Adopting the national control list is not meant to decrease Finland’s active involvement in international export control regimes but to support them in reaching their goals.
The national control list includes items that are relevant to the development of foreign, security and defence policy, such as items related to quantum technology and advanced semiconductor manufacturing technology as well as devices and technology related to materials engineering. These items and technologies are all subject to sanctions against Russia or would support the development of Russia’s research or military capacity. If the national export authorisation requirement were not in place, these items could be exported from Finland without control and sanctions could be circumvented via third countries.
The act on dual-use items further emphasises the importance of recognising legislation applicable to your company
The national supplementing legislation provided for in the new act on dual-use items primarily affects the operations of companies that export dual-use items and other organisations, such as universities. The new legislation also affects companies that act as brokers, transit operators or providers of intra-Union transfer of dual-use items or provide technical assistance relating to dual-use items.
What makes adapting operations in accordance with the obligations set out in the national control list more difficult is the fact that the list includes several intangible items, as does the control list appended to the Export Control Regulation. These include primarily software, technical data relating to technology and offering technical assistance. Due to the prevalence and variety of intangible items, companies and other operators should put rigorous effort into identifying whether the act on dual-use items is applicable to their operations and comply with the export authorisation procedure carefully to minimise harm to business or research operations.
Latest insights
Article published 5.9.2024 – Data & Technology
Technology acquisitions can boost companies’ growth – or cause them to fail
Article published 6.5.2024 – Employment
Outsourcing company functions – four key points for success
Article published 7.12.2023 – Data & Technology
Agreements define data sharing and re-use
Article published 29.11.2023 – Employment
Whistleblowing and data protection – frequently asked questions
Topi Lusenius, Anders Forss & Kim Parviainen
Tomi Kemppainen, Kim Parviainen & Eija Warma-Lehtinen
Eija Warma-Lehtinen & Ville Kukkonen
Latest references
LähiTapiola and OP Henkivakuutus – Successful representation of insurance companies in Supreme Administrative Court health data processing cases
We successfully represented insurance companies LähiTapiola and OP Henkivakuutus in two cases concerning an important point of principle: the right of insurance companies to process health data as part of the insurance application process. The Supreme Administrative Court handed down twin decisions ( one published as precedent ) addressing the matter in light of contrary DPA decisions. Under the Finnish Data Protection Act, insurance companies may, to simplify, process health data concerning “insured persons” (vakuutettu, försäkrad) to determine liability under the insurance. This rule constitutes an exception to Article 9 GDPR. At issue was whether the term “insured person” also covers people in the process of obtaining insurance coverage or only people who are already covered. In more practical terms: can an insurance company rely on the rule when considering whether/how to grant the insurance in the first place? The SAC answered in the affirmative and thus upheld the traditional industry approach over the DPA’s contrary view. The SAC noted that the Data Protection Act did not define the term “insured person” and thus looked at insurance legislation for guidance. As argued by the insurance companies, that legislation also uses the term in the context of describing the insured person’s pre-contractual informational obligations. Thus, and in view of the underlying purpose of the rule at issue, the SAC found that an “insured person” could be someone in the process of obtaining coverage, not just a person already covered. The outcome clarifies the scope of the local rule at the insurance application stage for the Finnish insurance industry.
Case published 22.1.2026
SuperOffice – Acquisition of Lyyti
We acted as Finnish counsel to SuperOffice AS, backed by Axcel, in its acquisition of Lyyti Oy from Finnish private equity firm Vaaka Partners and other sellers. Lyyti is a leading event management software company for physical, digital and hybrid events with a strong customer base in Finland, Sweden and France. SuperOffice is a leading provider of customer relationship management (CRM) software for small and medium-sized businesses across Northern Europe. Axcel is a Nordic private equity firm with a focus on technology, business services and industrials, healthcare, and consumer sectors.
Case published 9.12.2025
Lantmännen – Acquisition of Leipurin from Aspo
We advised Lantmännen ek för in its contemplated acquisition of Leipurin from Aspo Plc. Lantmännen is an agricultural cooperative and Northern Europe’s leader in agriculture, machinery, bioenergy and food products. Lantmännen is owned by 17,000 Swedish farmers and has 12,000 employees in over 20 countries. Leipurin is a leading Nordic supplier of bakery ingredients, equipment, and expert services to professional bakeries, confectioneries, and food manufacturers. The company operates across Finland, Sweden, and the Baltic countries with subsidiaries located in the aforementioned countries, providing comprehensive solutions to the baking industry. The closing of the transaction remains subject to regulatory approvals.
Case published 25.8.2025
Oomi – Expansion into mobile telecommunications
We assisted Oomi Oy in its expansion into the mobile telecommunications market with the launch of Oomi Mobiili, a new MVNO brand. Our work covered the preceding due diligence process as well as structuring and negotiating key partner agreements, laying a solid foundation for Oomi’s entry into the new market. Oomi Mobiili will operate as a virtual mobile network operator, offering customers the option to purchase a mobile subscription together with their electricity contract. The phased launch is set to begin in autumn 2025, with nationwide availability targeted for early 2026.
Case published 15.8.2025