1.10.2015

Fintech and the Finnish Market — Are They Ready for Each Other?

The technological revolution has disrupted and altered many industries in recent years. The most intense hype surrounding certain new technologies, like big data or the internet of things, may be settling, but not even traditionally static business can afford to rest on their laurels as Silicon Valley is constantly creating new innovations.

The next big thing on both sides of the Atlantic is financial technology, more commonly known as fintech. As the Guardian noted in an  article last spring, startups focusing on specialised financial services are making use of cheap cloud computing, big data, mobile devices and social media applications to compete with banks and other conventional providers of financial services.

From personal finance planning apps to crowdfunding, fintech companies leverage user-friendly interfaces and the flexibility of their services to take market share in products and services[1] that used to be the exclusive domain of larger players.

Complex Regulation Makes Dangerous Waters for Fintech Startups

As fintech companies enter the Finnish market, their biggest challenges may well be understanding and navigating complex regulation. Even simple fintech services, such as providing mobile payment solutions or trading applications, may require licenses to provide payment or investment services.

When it comes to peer2peer lending, operators should keep in mind that micro-lending is also regulated by consumer protection rules, and prospective service providers may need to register with regional authorities.

Obtaining licenses for all this and complying with statutory obligations can be both cumbersome and costly, which is far from an ideal fit for the generally lean and agile startup business model. Therefore, creating a proactive policy to address and mitigate regulatory concerns are vital initial measures for a startup looking to enter the fintech market.

Personal Data a Potential Land Mine

The use of personal data is strictly regulated in the EU under the Data Protection Directive (95/46/EC). Further data protection regulation is expected to come into effect during the upcoming years in the form of the new European Data Protection Regulation. At the same time as regulation is increasing, new technologies are looking for broader opportunities to permissibly utilise personal data.

Certain personal data has long been used for risk analysis in the financial industry. However, many traditional concepts associated with data processing are facing a revolution in the form of developments such as dual purpose social media applications, such as peer2peer lending platforms.

As tempting as the significant opportunities to use personal data available through various social media platforms may be to fintech startups, they have to watch their step and make sure their operations comply with constantly developing  data protection rules.

What to Look Out for In Fintech Investments

When looking to invest in fintech startups, venture capital investors should keep in mind the regulatory landscape described above. Most importantly, investors need to take into account the possibility of increased compliance and risk management costs as well as liability risks when conducting due diligence relating to start-up targets. This is especially demanding in the current environment of swelling regulation that remains inherently ambiguous with respect to new and disruptive technologies.

At worst, a fintech startup’s business could involve significant liability risks if it has neglected regulatory obligations. It is vital that investors identify such situations and engage the expertise to appropriately assess the risks involved when making investment decisions. As fintech companies gain more ground in the financial sector, venture capital and private equity investors have two possible ways to react: adapt 

or invest. If the financial sector  is reluctant to adapt by embracing new technologies, we may see a repeat of the kind of changes that occurred in the music industry since the launch of mp3 and P2P networks, albeit restricted by the industry’s regulated nature.

The mobile pay applications that have been launched by large banks and welcomed by customers are a good example of using investment to integrate fintech in existing businesses.

Fintech clearly holds potential that intrigues investors. This is evident in BlackRock’s recent of acquisition of FutureAdvisor, a previously Sequoia-backed start-up offering automated algorithm based financial planning services to consumers.

While interest among investors grows, fintech start-ups in the US are already expanding into insurance, yet another highly regulated financial services business. Despite the limitations set by regulation, the advance of fintech into the Finnish market seems inevitable. After all, this is a country that is already accustomed to widespread and well-functioning digital financial services, such as long-established internet banking portals.

[1] A World Economic Forum graphic of the fintech scene

Latest references

We advised Lantmännen ek för in its contemplated acquisition of Leipurin from Aspo Plc. Lantmännen is an agricultural cooperative and Northern Europe’s leader in agriculture, machinery, bioenergy and food products. Lantmännen is owned by 17,000 Swedish farmers and has 12,000 employees in over 20 countries. Leipurin is a leading Nordic supplier of bakery ingredients, equipment, and expert services to professional bakeries, confectioneries, and food manufacturers. The company operates across Finland, Sweden, and the Baltic countries with subsidiaries located in the aforementioned countries, providing comprehensive solutions to the baking industry. The closing of the transaction remains subject to regulatory approvals.
Case published 25.8.2025
We assisted Oomi Oy in its expansion into the mobile telecommunications market with the launch of Oomi Mobiili, a new MVNO brand. Our work covered the preceding due diligence process as well as structuring and negotiating key partner agreements, laying a solid foundation for Oomi’s entry into the new market. Oomi Mobiili will operate as a virtual mobile network operator, offering customers the option to purchase a mobile subscription together with their electricity contract. The phased launch is set to begin in autumn 2025, with nationwide availability targeted for early 2026. 
Case published 15.8.2025
We advised Nevel Oy in its acquisition of the business of Labio Oy. Lahti Aqua Oy and Salpakierto Oy sold their entire shareholdings in Labio to Nevel, expanding Nevel’s already significant biogas portfolio. The transaction will have no impact on Lahti Aqua’s water utility operations or Salpakierto’s municipal waste management responsibilities. Labio’s operations and customer relationships will continue as before. ‘This partnership is a natural next step for us as we continue investing in sustainable material efficiency and renewable energy solutions. By integrating Labio’s comprehensive offerings and expertise, we can provide customers with a strong platform for material circularity. We are also strengthening our market position as one of Finland’s leading material efficiency solution providers,’ says Ville Koikkalainen, Director of Industrial and Biogas Business at Nevel. Nevel is an energy infrastructure company offering advanced, climate-positive solutions for industry and real estate. It operates more than 130 energy production plants and manages over 40 district heating networks. Nevel’s annual turnover is EUR 150 million, and it employs 190 experts in Finland, Sweden and Estonia.
Case published 16.7.2025
The Supreme Administrative Court (SAC) issued a significant precedent (decision KHO:2025:23) in a case in which it found that the Finnish Motor Insurers’ Centre (Liikennevakuutuskeskus, LVK) processed patient data in accordance with the requirements concerning fairness, data minimisation, and privacy by design and by default when deciding on compensation claims. We represented LVK in this case in which the SAC upheld the Administrative Court’s decision to repeal the EUR 52,000 administrative fine imposed on LVK by the Sanctions Board of the Office of the Data Protection Ombudsman. The SAC also confirmed the Administrative Court’s decision, which, as far as we know, was the first of its kind in Finland, ordering the Office of the Data Protection Ombudsman to reimburse some of our client’s legal costs. The decision bears great significance for the insurance industry as a whole. The crux of the matter were LVK’s information requests under the Motor Liability Insurance Act for patient data that were essential in determining insurance or compensation claims. In certain cases, making a decision may require extensive patient data. The Office of the Data Protection Ombudsman had found that LVK had systematically made overly broad information requests infringing Articles 5 and 25 of the GDPR and that the information should have been provided in the form of separate medical opinions. The Administrative Court repealed the Data Protection Ombudsman’s decision and found that patient records from medical appointments are, as a general rule, essential in establishing causality in compensation matters. It also stated that the tasks related to the consideration of compensation matters are specifically the core tasks of the insurance company and not of the controller of patient data. Furthermore, the Administrative Court found no evidence indicating that LVK would have systematically made overly broad information requests. ‘Once again, our collaboration with C&S was seamless throughout this extensive process, and we could trust that our case was in expert hands’, says Visa Kronbäck, Chief Legal Officer of the Insurance Centre. The full decision is available on the SAC website (in Finnish):  KHO:2025:23.
Case published 18.6.2025