4.5.2016

Data Protection Update: Confirmed Date for Entry into Force of New EU Data Protection Regulation

The European Parliament voted to approve the final version of the EU’s new Data Protection Regulation on 14 April 2016, and the text of the new regulation was published in the Official Journal of the European Union on 4 May 2016. This means that the new regulation will fully enter into force of 25 May 2018. Both private and public sector actors will have to ensure that the processing of personal data they carry out is in compliance with the requirements of the new regulation by that date. The new obligations apply to the processing of personal data of both employees and customers.

The drafting of the Data Protection Regulation began when the European Commission published its proposal for overarching EU-level legislation of data protection in 2012. The EU’s Data Protection Regulation is part of the Commission’s digital single market strategy, which is intended to ‘tear down regulatory walls and finally move from 28 national markets to a single one’.  According to the Commission’s press release, a fully functional digital single market could contribute 415 billion euros per year to the EU’s economy.

A political consensus was reached on the contents of the Data Protection Regulation in December 2015, following which the text of the regulation has been finalised and translated into the official languages of all the Member States.

On 17 February 2016, the Finnish Ministry of Justice appointed a two-year committee to investigate and assess the national legislative actions necessitated by the Data Protection Regulation. The committee is to give its proposal concerning necessary amendments by the end of May 2017.

Have a look at our previous publications on the changes and requirements that the Data Protection Regulation will bring for private and public sector actors:

Official text of the Data Protection Regulation: Official Journal of the European Union L119


For further information, please contact: 
Eija Warma
Kaisa Keski-Vähälä
Anette Luomala

Latest references

We are proud to have provided legal assistance to PwC in the successful public tendering process for the comprehensive renewal of Kela’s benefits processing systems. Kela is the Social Insurance Institution of Finland, and this project is a significant cornerstone in modernising Finland’s social security infrastructure. PwC was selected as Kela’s strategic partner to implement a comprehensive overhaul of the benefits processing systems, digital services, customer relationship management, and information exchange platforms. The project aims to meet the demands of the future digital environment and enhance customer experience through the adoption of Salesforce technology. The new systems are expected to simplify benefit processes, enhance user experience for both customers, employees and other stakeholders, and ensure adaptability to future legislative changes. Castrén & Snellman provided strategic legal support to PwC throughout its successful bidding process, which was carried out through a competitive negotiated procedure. We extend our warmest congratulations to PwC for their successful bid and look forward to seeing the positive impact of this project on Finland’s social security system.
Case published 24.4.2025
We advised Milexia Group, a portfolio company of the French PE sponsor Crédit Mutuel Equity, on its acquisition of the activities of Alpha Positron Oy, a Finnish distributor specializing in GPS/GNSS, time and frequency solutions for the electronics industry, process automation, corporate IT, defense, and other demanding markets. Milexia Group is one of the world’s leading European suppliers for high-quality electronic components, systems and scientific instruments technology. It has offices, warehouses and technical centres in France, Italy, Spain, the United Kingdom, Germany, Nordics and Hong Kong. The acquisition aligns with Milexia’s strategy to expand its presence in the Nordic region and enhance its portfolio of communication solutions.
Case published 24.4.2025
We are acting as legal advisor to Piippo Plc in the sale of their bale netwrap and baler twine machines, related assets, and trademarks used in Piippo’s business to Portuguese Cotesi S.A. The sale of assets will be carried out in two phases and the final completion of the transaction is expected to occur during the first quarter of 2026. Piippo Oyj’s core business is baling nets and twine and it is one of the leading suppliers in the industry globally. The company’s global distribution network covers more than 40 countries. The company’s shares are listed on the First North Growth Market Finland operated by Nasdaq Helsinki Oy. Founded in 1967, Cotesi is one of the world’s leading producers of synthetic and natural twines, nets and ropes, with operations in Europe, North America and South America and its main production plant in Vila Nova de Gaia, Portugal.
Case published 17.4.2025
We acted as Finnish legal adviser to KKR in connection with its acquisition of the entire share capital of Karo Healthcare from EQT. The transaction follows Karo’s significant strategic transformation from a Nordic specialty pharma business into a leading pan-European consumer healthcare platform, with an attractive product portfolio spanning core categories such as Skin Health, Foot Health, and Intimate Health, as well as Digestive Health and Vitamins, Minerals & Supplements. KKR & Co. Inc. (NYSE: KKR), is a leading global investment firm that offers alternative asset management as well as capital markets and insurance solutions. KKR sponsors investment funds that invest in private equity, credit and real assets and has strategic partners that manage hedge funds.  Completion of the transaction is subject to customary conditions and regulatory approvals. The transaction is expected to close in the coming months.
Case published 17.4.2025