The Finnish Data Center Association considers the Ministry of Economic Affairs and Employment’s proposed legislation for a national data center registry to be highly welcome. However, both the transparency and security aspects of the registry should be strengthened beyond what is currently included in the draft proposal under public consultation.
According to the FDCA, the legislative proposal is a step in the right direction. A comprehensive and forward-looking overview of existing and planned data centers in Finland is necessary to ensure that information relevant to public debate and policymaking on the development of the data center sector is openly and up-to-date available to the media, decision-makers, and citizens.
Information currently collected under existing legislation only reflects activities that have already taken place. It does not cover planned data center developments, which are often the focus of public discussion. The registry could become the first national tool enabling a forward-looking assessment of the development of Finland’s digital infrastructure.
However, the proposal currently under preparation does not yet guarantee sufficiently timely access to information. Under the draft, the National Emergency Supply Agency would maintain the registry, but there is no obligation for it to communicate updates on a regular basis.
“Annual statistics published with a delay of several months are not enough,” says Antti Poikola, Executive Director of the Finnish Data Center Association. “To support public discussion and evidence-based decision-making, we consider it essential that the situation overview be published automatically, for example once a month or at least on a quarterly basis.”
“Another important point is that not all information can or should be public. The law must explicitly prohibit the inclusion in the registry of information relating to data center security arrangements, vulnerabilities, customers, or the content of processed data. Such restrictions are necessary to prevent hostile activities, whether carried out by criminal organizations or nation states.”
If the registry is to become a truly effective database supporting policymaking and public discussion, the publicly available information and the information intended solely for government authorities must be clearly separated. The confidentiality of the latter must be guaranteed.
“At its best, a timely and publicly available overview could also support investment decisions related to electricity generation projects,” Poikola adds.
Further information:
Antti “Jogi” Poikola
Excecutive Director
+358 44 337 5439
antti.poikola@fdca.fi