Finnish election data on AWS will debut at the 2027 parliamentary vote, with storage in Sweden, the Ministry of Justice says—a move expected to save about €4 million over ten years but drawing criticism from researchers who warn of trust and sovereignty risks.
Cost savings versus trust in elections
The Ministry of Justice argues that using Amazon Web Services (AWS) is the most cost‑effective and secure option, citing robust safeguards and data‑residency controls in Sweden. Election Director Arto Jääskeläinen says the EU and United States have agreed comprehensive protections for cloud data and that the system will not duplicate sensitive information outside Europe.
Critics disagree. Otto Kässi, a post‑doctoral researcher at Aalto University, calls the decision “hasty” and warns that moving election data abroad may erode public confidence in the integrity of the count—especially if voters fear exposure to non‑EU jurisdictions.
What will move to the cloud—and what will not
The plan concerns the election information system and related data storage for publishing and processing results. It does not change how Finns cast or count votes.
Finland does not use remote online voting. Ballots are cast in person and counted using established procedures. The cloud shift affects back‑end infrastructure and availability rather than the voting method itself.
Data residency in Sweden and aws controls
Hosting in Sweden places the workload in the AWS Europe (Stockholm) region under EU law. The ministry says contractual and technical safeguards will keep election data in Sweden, with protections against replication to third‑country servers.
AWS advertises granular data‑location controls, dedicated security operations, and sovereignty‑focused offerings designed for European public‑sector needs.
EU-USA data flows and legal uncertainty
Supporters note that the EU–U.S. Data Privacy Framework currently provides an adequacy basis for transatlantic data transfers. However, legal scholars and privacy authorities have long debated the reach of the U.S. CLOUD Act, which can compel U.S.-based providers to hand over certain data even when stored in the EU.
Researchers argue this jurisdictional tension keeps a residual legal risk that public bodies must assess when choosing American cloud vendors for critical election systems.
Timeline to 2027 and previous hosting
Finland’s next parliamentary election is scheduled for 18 April 2027. In recent local and regional elections, the system ran on domestic infrastructure operated by Tietoevry at a facility in Espoo. The planned shift to AWS would mark a first for national‑level election data to be hosted outside Finland, while remaining within the EU single market.
Why it matters for the Nordics and the EU
The decision feeds into a broader European debate over digital sovereignty: how to balance cost, resilience, and security with public trust in democratic processes. Nordic governments have generally embraced cloud services for efficiency, but election infrastructure is uniquely sensitive.
Whether Finland’s move becomes a Nordic precedent may depend on how convincingly authorities communicate technical safeguards, independent auditing, and incident response plans ahead of 2027.
