The EU’s General Data Protection Regulation, GDPR, entered into force on 25 May with the goal of unifying data protection legislation across Europe. It also requires that transparency and the power of the individual be increased in data processing. In Finland, the GDPR doesn’t radically change the basic pillars of data protection legislation, but rather is in line with the Finnish regulations that have been applied for the past 30 years.
Public debate about the new regulation has focused on a few individual questions, and administrative sanctions have taken on an oversized role in the debate. I personally wish that, instead of fixating on fines, the upper management of organisations would stop to think about how to secure data-based business operations in the event the authorities prohibit the use of data or order the deletion of data. Another important thing to ponder would be what the careless processing of data could mean to the reputation of a company. This latter issue is a subject that has gotten a great deal of media attention recently. There is more at play than the bogeyman of huge fines.
My hope is that the GDPR gets professionals from different fields to work together better and that this becomes on new export for the EU. We’ll know if my hopes come true in 2020 when the Commission is set to examine the practical impacts of the new regulations.
It is important for us lawyers to understand the logic underlying data systems as well as business needs and strategy if we are to come up with sustainable solutions for our clients. IT experts in turn need to understand the main principles of the law so that they can make sure that data systems and services comply with regulations.
Corporate management for its part needs to understand the opportunities offered by technology and the requirements of the law in order to make their businesses more innovative and profitable. Let’s make the most of this change!
A wise person once said, ‘Dear past, thank you for the lessons; dear future, we are ready’. We are ready at Castrén & Snellman—I hope you are, too!
Latest insights
Article published 8.5.2026 – Environment, Energy & Green Transition
Reform of Finland’s land use legislation – key takeaways for project developers
Article published 28.4.2026 – Private M&A
Unlocking value in carve-outs – Why integration planning deserves top priority in every carve-out
Article published 30.3.2026 – Competition & Procurement
Finnish FDI screening under reform — Update following the stakeholder consultation
Article published 3.3.2026 – Employment
The threshold for dismissal is lowered: what should be taken into account in practice?
Tarja Pirinen, Marius af Schultén & Joel Aartolahti
Benjamin Bade, Maiju Mäkinen & Samuli Salminen
Kiti Karvinen, Johanna Kyllöinen & Joachim Wik
Latest references
G&W Electric – Acquisition of Safegrid
We advised G&W Electric with its acquisition of Safegrid Oy, a leading provider of intelligent grid monitoring solutions based in Finland. The acquisition accelerates G&W Electric’s long-term strategy to integrate intelligent monitoring and predictive analytics into its power distribution portfolio, strengthening its offering to utility customers worldwide. Founded in 1905 and headquartered in Bolingbrook, Illinois, G&W Electric is a global leader in innovative power grid solutions, with a presence in over 100 countries. The company is known for advanced load and fault interrupting switches, reclosers, sensors, system protection equipment, power grid automation, intelligent grid monitoring, and transmission and distribution cable accessories. Safegrid is a Finnish technology company headquartered in Espoo, Finland. The company develops the Intelligent Grid System®, a grid monitoring solution that combines instant-on wireless sensors with advanced analytics to deliver real-time insight into grid conditions, enabling utilities to identify emerging issues, anticipate failures, and reduce outage duration across medium and high voltage distribution and transmission networks.
Case published 8.5.2026
Kiwa – Acquisition of Sertio
We advised Kiwa in its acquisition of Sertio Oy, a Finnish notified body designated by the authority in accordance with the EU Regulation on in vitro diagnostic medical devices (IVDR). Sertio provides conformity assessment services in accordance with IVDR. Kiwa is one of the world’s leading testing, inspection, and certification companies, operating in over 35 countries.
Case published 7.5.2026
Metsäkonepalvelu – Acquisition of Junnonen Forest and the business operations of Lamerit
We advised Metsäkonepalvelu Oy in its acquisition of the entire share capital of Junnonen Forest Oy, a Finnish timber harvesting services company, and the timber harvesting services business of Lamerit Oy. The acquisition supports Metsäkonepalvelu’s growth strategy and strengthens the company’s position, particularly in southeastern Finland. Metsäkonepalvelu is a portfolio company of A. Ahlström Oy, a Finnish family-owned industrial owner. The company provides mechanical timber harvesting services to forest companies, large private forest owners, and the public sector in Finland and Sweden. Metsäkonepalvelu Group employs nearly two hundred forestry professionals.
Case published 6.5.2026
Scanreco – Acquisition of CrossControl
We acted as Finnish counsel to Scanreco in its acquisition of CrossControl. Mannheimer Swartling (Sweden) acted as lead counsel for Scanreco. CrossControl, founded in Sweden, is a high-tech supplier of advanced display computers and central vehicle computing solutions for industrial vehicles and machines. Scanreco is a world leading supplier of professional radio remote control systems to international machinery, heavy equipment, and crane manufacturers. The combined group comprises approximately 600 employees and generates annual revenue of around SEK 1.4 billion.
Case published 5.5.2026