Two new drafts on technical regulations will supplement Finland’s gradual transition to a licensed online gambling regime over the next months.

A new revamped gambling framework, of which the drafts (subject to change) will be a part of, is expected to come into effect at the start of next year – officially allowing operators to start applying for a licence. The actual market launch is slated to kick off in January 2027.

The publishing of both sets of drafts will ease concerns from some corners that this slated launch date would be delayed. 

The latest drafts are in line with international regulatory standards, focusing on random number generation (RNG), information security and external auditing.

RNG guidelines

Operators working with RNG-based mechanics will have a clear guideline on the required assurance levels, approved testing methods, and a satisfactory threshold when it comes to adopting traceability and testing procedures.  As well as this, they will benefit from a full set of rules that set out how RNG should be implemented, documented, and controlled.

Security takes prevalence

Operational security will be segmented into a two-tier model, with a mandatory information security test conducted once every two years and an external vulnerability scan occurring annually – both tests subject to precise criteria and carried out by an independent accredited body.

The information security test will analyse each licence holder’s game outcome integrity levels, the robustness of personal and financial data protection, as well as the level of log file security. Again, this is envisioned to occur once every two years.

Meanwhile, the annual vulnerability assessment will aim to detect and mediate any potential system exploits early on. Both tests will be mandatory for operators and suppliers.

Accredited inspection bodies conducting the tests will be required to operate under ISO or IEC standards, with Finland potentially also recognising bodies accredited under Danish or Swedish standards during its transition – but this is still pending final approval.

Guidelines set to ease tensions

Previously, the regulatory transition has been criticised for being vague and lacking clear direction, with some experts even cautioning that we might see the implementation date being pushed back to June 2027 if no meaningful changes are imposed.

However, the new drafts with their cemented guidelines will certainly be a welcome step for stakeholders eyeing up the breakdown of the Veikkaus monopoly, with the state-backed operator itself standing firmly behind the market liberalisation plans.