The new IT2018 general terms and conditions have just be published to replace the IT2015 general terms and conditions. The update is motivated by the EU’s General Data Protection Regulation (GDPR), which will be applied starting on 25 May 2018. The IT2018 general terms and conditions are meant to be applied in small and mid-size IT procurements between businesses.
5.3.2018
New IT2018 General Terms and Conditions Published – Key Update, GDPR-Compliant Special Terms and Conditions Processing Personal Data
Tags
The largest change is that special terms and conditions for the processing of personal data (EHK) have been added to help meet the GDPR’s requirements in IT deliveries. These special terms and conditions will be a welcome aid both in future IT projects and in updating existing agreements. The general terms and conditions and cloud service terms and conditions have also been updated.
The GDPR requires that the outsourcing of personal data processing must be agreed in writing between the data controller and the data processor. This means that when a supplier processes personal data on behalf of its client as part of an IT delivery, this processing requires a written agreement fulfilling certain minimum requirements. This applies to both new and existing agreements, which means that existing agreements will have to be reviewed and updated to meet the GDPR’s requirements. The GDPR sets the minimum requirements for such agreements, such as commitments to comply with the data controller’s instructions and implementing sufficient data security.
The IT2018 EHK terms and conditions meet the GDPR’s minimum requirements and can be used as a base for data processing agreements. However, when drafting an agreement, it is important to account for the nature of the product or service being delivered and to ensure that the obligations concerning, for example, data security are sufficient with respect to the risk of the processing being outsourced. The IT2018 general terms and condition assume that the EHK terms and conditions take precedence over the other IT2018 terms and conditions.
The IT 2018 general terms and conditions have been drafted in cooperation by the Finland Chamber of Commerce, Ohjelmistoyrittäjät ry, the Finnish Association of Purchasing and Logistics LOGY, Technology Industries of Finland and the Finnish Information Processing Association, TIVIA.
Read more about outsourcing personal data processing on out blog.
For more information, please contact:
Mikko-Pekka Partanen
Kimmo Rekola
Latest news
Latest references
Cibus Real Estate – Acquisition of three retail properties
We advised Cibus Real Estate AB (publ) on its acquisition of three newly built retail properties in Pori, Finland. Kesko is the tenant in all three properties, and the average lease term is 8.1 years. Cibus is a real estate company listed on Nasdaq Stockholm Mid Cap. The company’s business concept is to acquire, develop and manage properties in Europe with daily goods chains as anchor tenants. The company currently owns approximately 700 properties in Europe.
Case published 12.11.2026
Seaya Nova and Molten Ventures – USD 80 million series C financing of Pliant
We advised Seaya Nova and Molten Ventures as Finnish counsel in connection with the USD 80 million Series C financing of Pliant, a Berlin-based fintech specialising in B2B payment solutions and corporate credit cards. The financing round was led by Seaya Nova and Speedinvest, with participation from Illuminate Financial, Motive Partners, Molten Ventures and Citi Ventures. Founded in Berlin in 2020, Pliant provides modular payment solutions for businesses and holds an EU e-money licence in Finland as well as a licence from the UK Financial Conduct Authority. We advised on the Finnish law aspects of the transaction alongside YPOG, which acted as lead counsel to Seaya Nova and Molten Ventures.
Case published 12.11.2026
Nala Renewables – Development, acquisition and financing of battery energy storage system (BESS) project
We advised Nala Renewables on the Finnish law aspects of the development, acquisition and financing of its battery energy storage system (BESS) project in Vuolijoki, Finland. The project comprises a 125 MW / 250 MWh battery energy storage system. Our advice extended beyond financing to the transaction’s legal due diligence and the acquisition of the project company. We also advised on key project contracts and financing documentation for the project finance facilities provided by Coöperatieve Rabobank U.A. The project is part of Nala Renewables’ growing portfolio of battery storage assets in Finland and the wider Nordic region, supporting the integration of renewable energy and contributing to the flexibility and stability of the Finnish electricity grid.
Case published 3.11.2026
Foundation Clinic – Funding Round
We advised Foundation Clinic in connection with its funding round backed by a group of prominent Finnish technology entrepreneurs and investors, including founders behind Supercell and Wolt. Foundation Clinic is a Finnish healthcare company developing a new approach to private healthcare focused on preventive, data-driven and continuous care. The company aims to combine comprehensive health data with ongoing medical care to identify and address health risks at an early stage.
Case published 29.10.2026