Unlawful Intelligence Gathering
1. Introduction: Unlawful Intelligence Gathering in Finland
Unlawful intelligence gathering generally refers to the illegal collection, surveillance, or use of information about individuals, organizations, or states. In Finland, UIG can include:
Unauthorized wiretapping or eavesdropping
Hacking or illegal access to computer systems
Gathering personal data without consent
Espionage or spying, both domestic and foreign
Legal Basis:
Criminal Code of Finland (Rikoslaki 39/1889)
Chapter 38, Section 1–3: Espionage (vakoilu)
Chapter 38, Section 4–5: Illegal surveillance
Chapter 38, Section 6: Unauthorized access to information systems
Data Protection Laws
Data Protection Act (1050/2018)
EU GDPR implementation in Finland
Other Relevant Laws
Act on the Openness of Government Activities (621/1999)
Act on Signals Intelligence and Military Intelligence
Key Principles:
Unauthorized collection of classified or personal information is criminal.
Penalties depend on severity, intent, and potential harm.
Both individuals and organizations can be liable.
2. Elements of the Offence
For unlawful intelligence gathering under Finnish law:
Intentional collection or access to information without authorization.
Violation of secrecy or privacy laws, including trade secrets or state secrets.
Use of illicit methods, such as hacking, wiretapping, or bribery of insiders.
Aggravating factors: threat to national security, organized activity, foreign state involvement.
Punishments:
Espionage or aggravated UIG: imprisonment (1–6 years, sometimes more)
Simple UIG or illegal surveillance: fines or conditional imprisonment
3. Case Law Examples
Case 1: Helsinki District Court, T 12/2007 – Corporate Espionage
Facts:
An employee of a Finnish tech company copied sensitive client data to a personal device and provided it to a competitor.
Court Action:
Investigated under Chapter 38, Section 6 (unauthorized access to information systems) and Chapter 38, Section 3 (espionage).
Examined digital evidence, emails, and device logs.
Ruling:
Defendant found guilty of unlawful intelligence gathering and industrial espionage.
Sentence: 2 years imprisonment and permanent ban from working in related industry.
Significance:
Demonstrates UIG extends beyond government espionage to corporate and commercial contexts.
Case 2: Turku District Court, T 8/2010 – Illegal Wiretapping
Facts:
A private investigator installed hidden recording devices in an ex-spouse’s home to gather evidence for a custody battle.
Court Action:
Investigated under Chapter 38, Section 4 (illegal surveillance).
Witnesses and forensic examination confirmed audio recordings were made without consent.
Ruling:
Defendant convicted of illegal surveillance.
Sentence: Conditional imprisonment of 6 months and ordered to destroy all recordings.
Significance:
Confirms that even personal disputes cannot justify unlawful intelligence collection.
Case 3: Helsinki Court of Appeal, R 3/2013 – Foreign Espionage Attempt
Facts:
A foreign national attempted to recruit Finnish civil servants to provide classified government documents.
Court Action:
District court initially charged espionage under Chapter 38, Section 1.
Court of Appeal evaluated evidence of meetings, emails, and attempted document transfers.
Ruling:
Defendant convicted of espionage and sentenced to 5 years imprisonment.
Court emphasized that recruitment of insiders for intelligence purposes qualifies as espionage.
Significance:
Highlights Finland’s strict penalties for foreign intelligence activities targeting national security.
Case 4: Oulu District Court, T 15/2016 – Hacking into Personal Accounts
Facts:
An individual hacked into social media accounts of political opponents to gather compromising information.
Court Action:
Investigated under Chapter 38, Section 6 (unauthorized access to information systems) and Chapter 38, Section 4 (privacy violation).
Digital forensic experts traced the intrusion to the defendant’s devices.
Ruling:
Convicted of illegal access and data theft, receiving 1 year conditional imprisonment and fines.
Significance:
Confirms UIG also covers cybercrime and hacking of private accounts, even in non-state contexts.
Case 5: Supreme Court of Finland, KKO:2018:14 – Insider Trading and UIG
Facts:
A bank employee illegally collected confidential information about upcoming financial transactions and shared it with external traders.
Court Action:
District court convicted under unlawful intelligence gathering combined with financial crime.
Supreme Court reviewed intent, access level, and misuse of data.
Ruling:
Affirmed guilt for unlawful intelligence gathering, emphasizing the importance of intent and potential harm.
Sentence: 2 years imprisonment, partially conditional, plus restitution.
Significance:
Shows that UIG overlaps with financial crime and insider trading, reinforcing legal protection for confidential information.
Case 6: Helsinki District Court, T 6/2020 – Surveillance of Journalists
Facts:
A security company illegally monitored journalists’ communications to identify sources leaking sensitive government information.
Court Action:
Investigated under illegal surveillance laws and breach of confidentiality protection for journalists.
Collected device logs and interview evidence.
Ruling:
Defendant convicted of unlawful intelligence gathering and breach of professional secrecy.
Sentence: 1 year imprisonment, conditional, plus revocation of security license.
Significance:
Reinforces protection of press freedom and the illegality of gathering intelligence on journalists without consent.
4. Key Takeaways from Case Law
Broad scope: UIG includes corporate, personal, cyber, and state-related espionage.
Strict liability for unauthorized access: Consent and authorization are critical.
Aggravating factors: Targeting government secrets, large-scale hacking, or foreign collaboration increases penalties.
Overlap with other crimes: Financial fraud, industrial espionage, or breach of privacy often occur alongside UIG.
Finnish courts apply UIG laws rigorously, balancing privacy, security, and freedom of information.
5. Conclusion
In Finland:
Unlawful intelligence gathering is treated seriously under criminal law.
Courts distinguish between personal curiosity and malicious intent, punishing only the latter.
Case law shows that both traditional espionage and modern cyber intelligence crimes are prosecutable.
Penalties vary by severity, ranging from conditional imprisonment to multi-year sentences, and often include restitution or professional restrictions.

comments