The EU’s General Data Protection Regulation, GDPR, entered into force on 25 May with the goal of unifying data protection legislation across Europe. It also requires that transparency and the power of the individual be increased in data processing. In Finland, the GDPR doesn’t radically change the basic pillars of data protection legislation, but rather is in line with the Finnish regulations that have been applied for the past 30 years.
Public debate about the new regulation has focused on a few individual questions, and administrative sanctions have taken on an oversized role in the debate. I personally wish that, instead of fixating on fines, the upper management of organisations would stop to think about how to secure data-based business operations in the event the authorities prohibit the use of data or order the deletion of data. Another important thing to ponder would be what the careless processing of data could mean to the reputation of a company. This latter issue is a subject that has gotten a great deal of media attention recently. There is more at play than the bogeyman of huge fines.
My hope is that the GDPR gets professionals from different fields to work together better and that this becomes on new export for the EU. We’ll know if my hopes come true in 2020 when the Commission is set to examine the practical impacts of the new regulations.
It is important for us lawyers to understand the logic underlying data systems as well as business needs and strategy if we are to come up with sustainable solutions for our clients. IT experts in turn need to understand the main principles of the law so that they can make sure that data systems and services comply with regulations.
Corporate management for its part needs to understand the opportunities offered by technology and the requirements of the law in order to make their businesses more innovative and profitable. Let’s make the most of this change!
A wise person once said, ‘Dear past, thank you for the lessons; dear future, we are ready’. We are ready at Castrén & Snellman—I hope you are, too!
Latest insights
Article published 9.4.2025 – Dispute Resolution
New European Court of Justice ruling C-537/23 sheds light on the interpretation and validity of asymmetric jurisdiction clauses – Implications for European businesses
Article published 7.4.2025 – Private Equity & Venture Capital
Tax credit for major clean transition investments passed in Parliament – application period until 29 August 2025
Article published 25.3.2025 – Mergers & Acquisitions
How to successfully run a large-scale cross-border M&A project?
Article published 10.3.2025 – Mergers & Acquisitions
Navigating uncharted waters: M&A and defence tech in the age of geopolitical uncertainty
Robin Ollus & Tuomas Lehtinen
Janne Juusela, Mikko Alakare, Samuli Tarkiainen, Marius af Schultén, Jarno Tanhuanpää, Kanerva Sunila & Noora Ahonen
Carola Lindholm & Samuli Tarkiainen
Markus Rahnu
Latest references
PwC – Public tender in Kela’s Eepos procurement process
We are proud to have provided legal assistance to PwC in the successful public tendering process for the comprehensive renewal of Kela’s benefits processing systems. Kela is the Social Insurance Institution of Finland, and this project is a significant cornerstone in modernising Finland’s social security infrastructure. PwC was selected as Kela’s strategic partner to implement a comprehensive overhaul of the benefits processing systems, digital services, customer relationship management, and information exchange platforms. The project aims to meet the demands of the future digital environment and enhance customer experience through the adoption of Salesforce technology. The new systems are expected to simplify benefit processes, enhance user experience for both customers, employees and other stakeholders, and ensure adaptability to future legislative changes. Castrén & Snellman provided strategic legal support to PwC throughout its successful bidding process, which was carried out through a competitive negotiated procedure. We extend our warmest congratulations to PwC for their successful bid and look forward to seeing the positive impact of this project on Finland’s social security system.
Case published 24.4.2025
Milexia Group – Acquisition of business of Alpha Positron
We advised Milexia Group, a portfolio company of the French PE sponsor Crédit Mutuel Equity, on its acquisition of the activities of Alpha Positron Oy, a Finnish distributor specializing in GPS/GNSS, time and frequency solutions for the electronics industry, process automation, corporate IT, defense, and other demanding markets. Milexia Group is one of the world’s leading European suppliers for high-quality electronic components, systems and scientific instruments technology. It has offices, warehouses and technical centres in France, Italy, Spain, the United Kingdom, Germany, Nordics and Hong Kong. The acquisition aligns with Milexia’s strategy to expand its presence in the Nordic region and enhance its portfolio of communication solutions.
Case published 24.4.2025
Piippo – Sale of bale netwrap and baler twine machines and certain trademarks
We are acting as legal advisor to Piippo Plc in the sale of their bale netwrap and baler twine machines, related assets, and trademarks used in Piippo’s business to Portuguese Cotesi S.A. The sale of assets will be carried out in two phases and the final completion of the transaction is expected to occur during the first quarter of 2026. Piippo Oyj’s core business is baling nets and twine and it is one of the leading suppliers in the industry globally. The company’s global distribution network covers more than 40 countries. The company’s shares are listed on the First North Growth Market Finland operated by Nasdaq Helsinki Oy. Founded in 1967, Cotesi is one of the world’s leading producers of synthetic and natural twines, nets and ropes, with operations in Europe, North America and South America and its main production plant in Vila Nova de Gaia, Portugal.
Case published 17.4.2025
KKR – Acquisition of Karo Healthcare
We acted as Finnish legal adviser to KKR in connection with its acquisition of the entire share capital of Karo Healthcare from EQT. The transaction follows Karo’s significant strategic transformation from a Nordic specialty pharma business into a leading pan-European consumer healthcare platform, with an attractive product portfolio spanning core categories such as Skin Health, Foot Health, and Intimate Health, as well as Digestive Health and Vitamins, Minerals & Supplements. KKR & Co. Inc. (NYSE: KKR), is a leading global investment firm that offers alternative asset management as well as capital markets and insurance solutions. KKR sponsors investment funds that invest in private equity, credit and real assets and has strategic partners that manage hedge funds. Completion of the transaction is subject to customary conditions and regulatory approvals. The transaction is expected to close in the coming months.
Case published 17.4.2025