ARTICLE · 24 SEPTEMBER 2026
Business Insurance 2026: The Cybersecurity Act
The Finnish Cybersecurity Act has fundamentally transformed business insurance requirements by extending cyber risk management obligations to thousands of companies across new sectors. With management now personally liable for cybersecurity compliance and facing potential fines up to EUR 10 million, organizations must reassess their cyber insurance coverage, directors' and officers' liability policies, and overall risk management frameworks.
Business Insurance 2026: The Cybersecurity Act Reshapes the Landscape of Risk Management
Business insurance has traditionally been seen as a tool for managing property, business interruption and liability risks. In recent years, however, a new and rapidly growing focus has emerged: cyber risks and the regulations governing them. The Finnish Cybersecurity Act, which implemented the EU’s NIS 2 Directive, has introduced new risk management and reporting obligations for thousands of Finnish companies. At the same time, the cyber insurance market is undergoing a period of transition, with prices having fallen but the claims trend remaining uncertain. This article outlines what company management and those responsible for risk management need to know about the current situation.
We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.
View source