1.10.2015

Fintech and the Finnish Market — Are They Ready for Each Other?

The technological revolution has disrupted and altered many industries in recent years. The most intense hype surrounding certain new technologies, like big data or the internet of things, may be settling, but not even traditionally static business can afford to rest on their laurels as Silicon Valley is constantly creating new innovations.

The next big thing on both sides of the Atlantic is financial technology, more commonly known as fintech. As the Guardian noted in an  article last spring, startups focusing on specialised financial services are making use of cheap cloud computing, big data, mobile devices and social media applications to compete with banks and other conventional providers of financial services.

From personal finance planning apps to crowdfunding, fintech companies leverage user-friendly interfaces and the flexibility of their services to take market share in products and services[1] that used to be the exclusive domain of larger players.

Complex Regulation Makes Dangerous Waters for Fintech Startups

As fintech companies enter the Finnish market, their biggest challenges may well be understanding and navigating complex regulation. Even simple fintech services, such as providing mobile payment solutions or trading applications, may require licenses to provide payment or investment services.

When it comes to peer2peer lending, operators should keep in mind that micro-lending is also regulated by consumer protection rules, and prospective service providers may need to register with regional authorities.

Obtaining licenses for all this and complying with statutory obligations can be both cumbersome and costly, which is far from an ideal fit for the generally lean and agile startup business model. Therefore, creating a proactive policy to address and mitigate regulatory concerns are vital initial measures for a startup looking to enter the fintech market.

Personal Data a Potential Land Mine

The use of personal data is strictly regulated in the EU under the Data Protection Directive (95/46/EC). Further data protection regulation is expected to come into effect during the upcoming years in the form of the new European Data Protection Regulation. At the same time as regulation is increasing, new technologies are looking for broader opportunities to permissibly utilise personal data.

Certain personal data has long been used for risk analysis in the financial industry. However, many traditional concepts associated with data processing are facing a revolution in the form of developments such as dual purpose social media applications, such as peer2peer lending platforms.

As tempting as the significant opportunities to use personal data available through various social media platforms may be to fintech startups, they have to watch their step and make sure their operations comply with constantly developing  data protection rules.

What to Look Out for In Fintech Investments

When looking to invest in fintech startups, venture capital investors should keep in mind the regulatory landscape described above. Most importantly, investors need to take into account the possibility of increased compliance and risk management costs as well as liability risks when conducting due diligence relating to start-up targets. This is especially demanding in the current environment of swelling regulation that remains inherently ambiguous with respect to new and disruptive technologies.

At worst, a fintech startup’s business could involve significant liability risks if it has neglected regulatory obligations. It is vital that investors identify such situations and engage the expertise to appropriately assess the risks involved when making investment decisions. As fintech companies gain more ground in the financial sector, venture capital and private equity investors have two possible ways to react: adapt 

or invest. If the financial sector  is reluctant to adapt by embracing new technologies, we may see a repeat of the kind of changes that occurred in the music industry since the launch of mp3 and P2P networks, albeit restricted by the industry’s regulated nature.

The mobile pay applications that have been launched by large banks and welcomed by customers are a good example of using investment to integrate fintech in existing businesses.

Fintech clearly holds potential that intrigues investors. This is evident in BlackRock’s recent of acquisition of FutureAdvisor, a previously Sequoia-backed start-up offering automated algorithm based financial planning services to consumers.

While interest among investors grows, fintech start-ups in the US are already expanding into insurance, yet another highly regulated financial services business. Despite the limitations set by regulation, the advance of fintech into the Finnish market seems inevitable. After all, this is a country that is already accustomed to widespread and well-functioning digital financial services, such as long-established internet banking portals.

[1] A World Economic Forum graphic of the fintech scene

Latest references

We advised G&W Electric with its acquisition of Safegrid Oy, a leading provider of intelligent grid monitoring solutions based in Finland. The acquisition accelerates G&W Electric’s long-term strategy to integrate intelligent monitoring and predictive analytics into its power distribution portfolio, strengthening its offering to utility customers worldwide. Founded in 1905 and headquartered in Bolingbrook, Illinois, G&W Electric is a global leader in innovative power grid solutions, with a presence in over 100 countries. The company is known for advanced load and fault interrupting switches, reclosers, sensors, system protection equipment, power grid automation, intelligent grid monitoring, and transmission and distribution cable accessories. Safegrid is a Finnish technology company headquartered in Espoo, Finland. The company develops the Intelligent Grid System®, a grid monitoring solution that combines instant-on wireless sensors with advanced analytics to deliver real-time insight into grid conditions, enabling utilities to identify emerging issues, anticipate failures, and reduce outage duration across medium and high voltage distribution and transmission networks.
Case published 8.5.2026
We advised UK-based investment company Downing in its acquisition of the entire share capital of Tornionlaakson Voima Oy. Tornionlaakson Voima owns three hydropower plants in the Tengeliönjoki river system – the Portimokoski power plants in Ylitornio, the Jolmankoski power plants in Raanujärvi and the Kaaranneskoski power plants in Sirkkakoski. The power plants produce a total of approx. 45 gigawatt-hours of electricity per year. Tornionlaakson Voima’s daily operations will continue normally, and the transaction will not affect customers. The consummation of the transaction is subject to the approval of the Ministry of Economic Affairs and Employment. Downing has over 35 years’ experience in providing a wide range of investment solutions to the needs of institutional investors, advisers and retail investors. The company manages over £2 billion in assets in both the private and public markets and its current hydro power portfolio includes approx. 50 hydro power plants in the Nordics. 
Case published 27.3.2026
We successfully represented insurance companies LähiTapiola and OP Henkivakuutus in two cases concerning an important point of principle: the right of insurance companies to process health data as part of the insurance application process. The Supreme Administrative Court handed down twin decisions ( one published as precedent ) addressing the matter in light of contrary DPA decisions. Under the Finnish Data Protection Act, insurance companies may, to simplify, process health data concerning “insured persons” (vakuutettu, försäkrad) to determine liability under the insurance. This rule constitutes an exception to Article 9 GDPR. At issue was whether the term “insured person” also covers people in the process of obtaining insurance coverage or only people who are already covered. In more practical terms: can an insurance company rely on the rule when considering whether/how to grant the insurance in the first place? The SAC answered in the affirmative and thus upheld the traditional industry approach over the DPA’s contrary view. The SAC noted that the Data Protection Act did not define the term “insured person” and thus looked at insurance legislation for guidance. As argued by the insurance companies, that legislation also uses the term in the context of describing the insured person’s pre-contractual informational obligations. Thus, and in view of the underlying purpose of the rule at issue, the SAC found that an “insured person” could be someone in the process of obtaining coverage, not just a person already covered. The outcome clarifies the scope of the local rule at the insurance application stage for the Finnish insurance industry.
Case published 22.1.2026
We acted as Finnish counsel to SuperOffice AS, backed by Axcel, in its acquisition of Lyyti Oy from Finnish private equity firm Vaaka Partners and other sellers. Lyyti is a leading event management software company for physical, digital and hybrid events with a strong customer base in Finland, Sweden and France. SuperOffice is a leading provider of customer relationship management (CRM) software for small and medium-sized businesses across Northern Europe. Axcel is a Nordic private equity firm with a focus on technology, business services and industrials, healthcare, and consumer sectors.
Case published 9.12.2025