31.5.2018

GDPR Calls for Cooperation

Tags

The EU’s General Data Protection Regulation, GDPR, entered into force on 25 May with the goal of unifying data protection legislation across Europe. It also requires that transparency and the power of the individual be increased in data processing. In Finland, the GDPR doesn’t radically change the basic pillars of data protection legislation, but rather is in line with the Finnish regulations that have been applied for the past 30 years.

Public debate about the new regulation has focused on a few individual questions, and administrative sanctions have taken on an oversized role in the debate. I personally wish that, instead of fixating on fines, the upper management of organisations would stop to think about how to secure data-based business operations in the event the authorities prohibit the use of data or order the deletion of data. Another important thing to ponder would be what the careless processing of data could mean to the reputation of a company. This latter issue is a subject that has gotten a great deal of media attention recently. There is more at play than the bogeyman of huge fines.

My hope is that the GDPR gets professionals from different fields to work together better and that this becomes on new export for the EU. We’ll know if my hopes come true in 2020 when the Commission is set to examine the practical impacts of the new regulations.

It is important for us lawyers to understand the logic underlying data systems as well as business needs and strategy if we are to come up with sustainable solutions for our clients. IT experts in turn need to understand the main principles of the law so that they can make sure that data systems and services comply with regulations.

Corporate management for its part needs to understand the opportunities offered by technology and the requirements of the law in order to make their businesses more innovative and profitable. Let’s make the most of this change!

A wise person once said, ‘Dear past, thank you for the lessons; dear future, we are ready’. We are ready at Castrén & Snellman—I hope you are, too!

Latest references

We acted as legal adviser to Banyan Software on its acquisition of Carus Ferry, a Finland-based provider of reservation, check-in and port operations software for ferry and passenger shipping operators. The acquisition further strengthens Banyan Software’s presence in the Nordic region while providing Carus with a long-term partner to support its continued growth and development. Carus was founded in 1998 and is headquartered in Mariehamn on the Åland Islands, Finland. The company develops mission-critical software for ferry, cruise and passenger shipping operators, covering the full passenger journey from booking and ticketing to capacity management, check-in and boarding. Carus also provides port automation, onboard sales systems and business information tools. The company serves approximately 30 operators across four continents and is the largest vendor by customer count in ferry reservation and departure control. Banyan Software is an acquirer and long-term operator of mission-critical software businesses serving specialised industries. Founded in 2016, Banyan follows a buy-and-hold-for-life approach and supports the long-term growth and development of its portfolio companies. Banyan operates more than 130 portfolio companies across North and South America, the United Kingdom, Europe and APAC. Following the acquisition of Carus, Banyan operates three businesses in the Nordic region.
Case published 20.10.2026
We advised Move Energy as an investor in connection with the combination of 3North Partners Plc and Steady Energy Oy and the related private placement and initial public offering of the combined company on Nasdaq First North Growth Market Finland. In connection with the transaction, 3North Partners received approximately EUR 69.8 million in investor commitments from a group of institutional and other investors, including Move Energy, to fund the combined company. Steady Energy is a Finnish nuclear technology company developing a new generation of small modular reactors (SMRs) particularly suited for district heating. Its LDR-50 reactor is designed to provide cities and utilities with a scalable and low-carbon alternative to combustion-based heat production.
Case published 19.10.2026
We advised Efima Oyj on the sale of its AI business to Better Care Technologies Oy. The transaction included Efima’s Moiva AI platform developed for the care sector, the related technology and brand, customer contracts, and the experts working in the business. Efima is a Finnish digital company that supports the sustainable growth of large and mid-sized companies by streamlining their business processes and by creating competitive advantage through the innovative use of artificial intelligence and data. The company has nearly 200 experts based in Helsinki and Tampere. 
Case published 21.9.2026
We advised Neoen Renewables Finland Oy, part of the French Neoen Group, in its sale of a data centre project to a consortium consisting of international data centre developers and operators. This marked Neoen’s first data centre development project in Finland. Founded in 2008, Neoen is one of the world’s leading independent renewable energy producers. The company operates in 15 countries. It develops, finances, builds, owns, and operates solar power plants, wind farms, and battery storage systems. Neoen Group is owned by global alternative asset manager Brookfield Corporation.
Case published 17.9.2026