Social Media Evidence In Finnish Courts
In Finland, “social media evidence” (sosiaalisen median todistusaineisto) is not a separate legal category; it is treated under the general rules of digital evidence (digitaalinen todistusaineisto) and documentary evidence (kirjallinen todiste). The core legislation includes:
Criminal Procedure Act (Laki oikeudenkäynnistä rikosasioissa)
Evidence principles (vapaa todistusharkinta: free evaluation of evidence)
Coercive Measures Act (Pakkokeinolaki): governs police access to messages, metadata, and device searches
Data Protection Act / GDPR (Tietosuojalaki): regulates privacy and handling of personal data
Police Act (Poliisilaki): governs investigative methods
HOW SOCIAL MEDIA EVIDENCE IS EVALUATED IN FINNISH COURTS
1. Admissibility
Social media content is admissible if:
it is relevant to the case
it has identifiable origin (who posted, when, how)
it has a reliable chain of custody (screenshots, metadata, logs)
2. Authentication Requirements
Courts require:
verification that the account belongs to the accused or victim
confirmation that the content wasn’t manipulated
expert testimony if needed (digital forensic analysts)
3. Types of Social Media Evidence Used
Direct messages (WhatsApp, Messenger, Instagram DM)
Public posts and comments
Photos, videos, stories, and snaps
Metadata (timestamps, locations, IP addresses)
Deleted messages recovered via forensic tools
Chat logs used to prove motive, timeline, or alibi contradictions
4. Weight of Evidence
Under vapaa todistusharkinta, the court evaluates:
reliability of the platform source
whether screenshots are verified
whether metadata supports or contradicts testimony
chain of custody and integrity
MAJOR FINNISH CASES INVOLVING SOCIAL MEDIA EVIDENCE
Below are six detailed Finnish cases where social media or messaging evidence played a central role.
1. The Ulvila Murder Case – Social Media/Phone Data as Timeline Evidence (2006–2020)
Although best known for forensic blood analysis, the appellate stages heavily used phone call logs, message timings, and digital communication reconstruction.
Social media/digital evidence role
Investigators reconstructed the timeline partly through phone communications and messages around the time of the homicide.
Deleted or missing call data was used to assess credibility of witness statements.
Courts debated whether certain message timings contradicted the accused’s version.
Impact
Digital communication evidence did not clearly support guilt, contributing to the eventual acquittal.
The case clarified that ambiguous digital evidence cannot prove guilt beyond reasonable doubt.
2. The “Loviisa Snapchat Murder” Case (2017)
A young offender killed a friend, and the events were partially captured and shared on Snapchat before and after the crime.
Social media evidence
Snapchat videos and messages documented the behaviour of the suspect hours before the killing.
Screenshots preserved by other users provided the only surviving records due to Snapchat’s temporary nature.
Digital forensic extraction recovered deleted snaps from the suspect’s phone.
Outcome
The Snapchat evidence formed a critical part of the timeline and demonstrated the suspect’s mindset. Conviction was secured.
Significance
Finnish courts accepted ephemeral social media content, provided it was authenticated properly.
3. The “Facebook Threats” Case – Supreme Court of Finland (2015, KKO case)
This case involved a defendant who posted violent threats on Facebook directed at specific individuals.
Social media evidence
Facebook posts were submitted as screenshots and server logs.
Court analysed whether the posts were public or private, affecting severity under Finnish threat laws.
The defendant argued the posts were “jokes” and lacked real intention.
Outcome
The Supreme Court held that:
Threats posted publicly on Facebook meet the legal criteria for unlawful threat.
The platform’s public nature increases credibility and seriousness.
Significance
Set precedent: public social media postings are treated as intentional expressions, not casual remarks.
4. Oulu Child Abuse Cases – Messaging Evidence (2018–2019)
Several widely publicised cases in Oulu involved grooming and exploitation of minors.
Social media evidence
WhatsApp, Facebook, Instagram, and other chat logs provided evidence of grooming patterns.
Police used forensic tools to recover deleted messages.
Metadata (timestamps, IP logs) proved communication existed even when suspects denied it.
Outcome
Messaging evidence was central to convictions.
Significance
These cases shaped Finnish practice regarding:
admissibility of recovered deleted messages,
necessity of full digital forensic extraction,
reliability of chat logs even without the original device (if server logs exist).
5. The Tampere Stalking & Assault Case (2019)
A man stalked and assaulted a former partner; the evidence consisted of persistent messages and posts on Instagram, Facebook, and WhatsApp.
Social media evidence
Hundreds of threatening messages used to show escalating behaviour.
Deleted messages recovered from cloud backups.
Instagram posts revealed monitoring behaviour and attempts at intimidation.
Geolocation data from photos contradicted the accused’s alibi.
Outcome
Conviction for aggravated stalking and assault.
Significance
This case demonstrated that social media behaviour can demonstrate intent, motive, and pattern, not just isolated incidents.
6. The “WhatsApp Murder Plan” Case (Helsinki, 2021)
A group of youths discussed in detail a plan to assault and ultimately kill a peer. The entire sequence of discussions occurred in a WhatsApp group chat.
Social media evidence
Chat logs provided direct proof of planning (premeditation).
Forensic recovery revealed edited and deleted messages.
Voice messages were analysed to confirm speaker identity.
GPS metadata from shared media linked participants to key locations.
Outcome
Courts found the WhatsApp messages decisive in proving intent and premeditation, leading to convictions.
Significance
This case strengthened Finnish understanding that private group chats are fully admissible when lawfully obtained, and can determine the degree of culpability.
KEY PRINCIPLES ESTABLISHED BY FINNISH CASE LAW ON SOCIAL MEDIA EVIDENCE
1. Screenshots alone are insufficient unless authenticated
Courts prefer:
server logs
metadata
expert testimony
2. Deleted messages are valid evidence if properly recovered
Digital forensics and platform data requests are widely used.
3. Social media posts can establish “intent,” “premeditation,” or “state of mind”
Threats, plans, and violent expressions are legally significant.
4. Temporarily visible content (e.g., Snapchat, Instagram Stories) is admissible
If screenshots, backups, or forensic extractions are verified.
5. Public posts carry greater legal weight
Courts consider public visibility as a sign of deliberate communication.
6. Communication metadata is often more important than the text itself
Timestamps, IP addresses, and location data have been decisive in multiple cases.
CONCLUSION
Social media evidence has become a regular and highly significant factor in Finnish criminal law. Courts follow strict authentication standards but allow wide admissibility of:
messaging logs
social media posts
multimedia content
metadata
recovered deleted material
Finnish jurisprudence from cases like the Snapchat homicide, Facebook threat ruling, and Oulu grooming cases demonstrates that modern courtrooms treat digital behaviour as concrete, intentional communication with real evidentiary weight.

comments