The new IT2018 general terms and conditions have just be published to replace the IT2015 general terms and conditions. The update is motivated by the EU’s General Data Protection Regulation (GDPR), which will be applied starting on 25 May 2018. The IT2018 general terms and conditions are meant to be applied in small and mid-size IT procurements between businesses.
5.3.2018
New IT2018 General Terms and Conditions Published – Key Update, GDPR-Compliant Special Terms and Conditions Processing Personal Data
Tags
The largest change is that special terms and conditions for the processing of personal data (EHK) have been added to help meet the GDPR’s requirements in IT deliveries. These special terms and conditions will be a welcome aid both in future IT projects and in updating existing agreements. The general terms and conditions and cloud service terms and conditions have also been updated.
The GDPR requires that the outsourcing of personal data processing must be agreed in writing between the data controller and the data processor. This means that when a supplier processes personal data on behalf of its client as part of an IT delivery, this processing requires a written agreement fulfilling certain minimum requirements. This applies to both new and existing agreements, which means that existing agreements will have to be reviewed and updated to meet the GDPR’s requirements. The GDPR sets the minimum requirements for such agreements, such as commitments to comply with the data controller’s instructions and implementing sufficient data security.
The IT2018 EHK terms and conditions meet the GDPR’s minimum requirements and can be used as a base for data processing agreements. However, when drafting an agreement, it is important to account for the nature of the product or service being delivered and to ensure that the obligations concerning, for example, data security are sufficient with respect to the risk of the processing being outsourced. The IT2018 general terms and condition assume that the EHK terms and conditions take precedence over the other IT2018 terms and conditions.
The IT 2018 general terms and conditions have been drafted in cooperation by the Finland Chamber of Commerce, Ohjelmistoyrittäjät ry, the Finnish Association of Purchasing and Logistics LOGY, Technology Industries of Finland and the Finnish Information Processing Association, TIVIA.
Read more about outsourcing personal data processing on out blog.
For more information, please contact:
Mikko-Pekka Partanen
Kimmo Rekola
Latest news
Latest references
Suominen Corporation – Rights Issue
We advised Suominen Corporation in connection with its rights issue. The offering was oversubscribed, and the company raised gross proceeds of approximately EUR 28 million. We also advised Suominen in connection with the renegotiation of the terms of the company’s three-year EUR 100 million syndicated credit facility, under which the maturity was extended and headroom was added to the financial covenants. “I would like to thank our shareholders for their support and confidence in Suominen’s future. The completion of the Offering will enable us to accelerate the implementation of our Full Potential Program while strengthening our capital structure. Our transformation particularly focuses on enhancing the reliability and efficiency of our production and supply, and on reinforcing our commercial capabilities, allowing us to better meet the expectations of our customers and shareholders”, comments Charles Héaulmé, President and CEO of Suominen. Suominen is a nonwovens manufacturer operating in global markets. Suominen creates value by taking fiber raw materials and turning them into nonwovens that the company’s customers convert into both consumer and professional end products. Suominen’s vision is to be the frontrunner for nonwovens innovation and sustainability. Suominen’s net sales in 2025 were EUR 412.4 million and the company has almost 700 professionals working in Europe and in the Americas. Suominen’s shares are listed on Nasdaq Helsinki.
Case published 6.7.2026
Nordea Bank Abp and Avain Yhtiöt – A financing arrangement of a real estate portfolio
We acted as joint legal advisor for Nordea Bank Abp and Avain Yhtiöt in an approximately EUR 48 million financing arrangement which included facilities for refinancing of an existing real estate portfolio and also for acquisition and property development purposes. The financing arrangement strengthens Avain Yhtiöt’s objective to build and maintain a functional, safe and environmentally friendly living environment, as well as to develop the overall quality of housing and construction. Avain Yhtiöt is a Finnish group specialising in housing and housing-related services, construction contracting and new construction. Its goal is to build 1,000 new apartments per year in key growth areas in Finland.
Case published 2.7.2026
Shareholders – Sale of the Suomen Autohuolto Group
We advised the shareholders of Suomen Autohuolto Oy in connection with the sale of the company’s entire share capital, to SAKA Finland Group Oy. Suomen Autohuolto Group is one of Finland’s largest companies specializing in brand-specific automotive maintenance and has locations in Oulu, Tampere, and from July, also in Järvenpää. The transaction is subject to final approval by the Finnish Competition and Consumer Authority (KKV).
Case published 26.6.2026
Natural Resources Institute Finland – AI training
We delivered two tailor-made AI workshops for the lawyers at the Natural Resources Institute Finland (Luke). We discussed the AI revolution and its impact on lawyers’ ways of thinking and working, and left the participants with practical solutions for enhancing and streamlining their work with Legora. Our AI-specialist lawyers prepared use cases tailored to Luke and the needs of public administration, which Luke received for its own use following the workshops. These use cases covered topics such as: utilising legal sources and the organisation’s own data to maximise AI results building and leveraging AI workflows AI-enhanced contract drafting based on a large volume of documents. The workshops sparked wide-ranging discussion on the role and benefits of AI in legal work. Participants appreciated how clearly and comprehensively our experts were able to present the nature and benefits of AI specifically within a legal context. ‘The workshops provided excellent support for Luke’s goal of leveraging AI responsibly and gave us concrete and ready-to-use practical takeaways,’ says Hannu Laitinen, Luke’s Senior Vice President, Administrative Affairs.
Case published 26.6.2026