The new IT2018 general terms and conditions have just be published to replace the IT2015 general terms and conditions. The update is motivated by the EU’s General Data Protection Regulation (GDPR), which will be applied starting on 25 May 2018. The IT2018 general terms and conditions are meant to be applied in small and mid-size IT procurements between businesses.
5.3.2018
New IT2018 General Terms and Conditions Published – Key Update, GDPR-Compliant Special Terms and Conditions Processing Personal Data
Tags
The largest change is that special terms and conditions for the processing of personal data (EHK) have been added to help meet the GDPR’s requirements in IT deliveries. These special terms and conditions will be a welcome aid both in future IT projects and in updating existing agreements. The general terms and conditions and cloud service terms and conditions have also been updated.
The GDPR requires that the outsourcing of personal data processing must be agreed in writing between the data controller and the data processor. This means that when a supplier processes personal data on behalf of its client as part of an IT delivery, this processing requires a written agreement fulfilling certain minimum requirements. This applies to both new and existing agreements, which means that existing agreements will have to be reviewed and updated to meet the GDPR’s requirements. The GDPR sets the minimum requirements for such agreements, such as commitments to comply with the data controller’s instructions and implementing sufficient data security.
The IT2018 EHK terms and conditions meet the GDPR’s minimum requirements and can be used as a base for data processing agreements. However, when drafting an agreement, it is important to account for the nature of the product or service being delivered and to ensure that the obligations concerning, for example, data security are sufficient with respect to the risk of the processing being outsourced. The IT2018 general terms and condition assume that the EHK terms and conditions take precedence over the other IT2018 terms and conditions.
The IT 2018 general terms and conditions have been drafted in cooperation by the Finland Chamber of Commerce, Ohjelmistoyrittäjät ry, the Finnish Association of Purchasing and Logistics LOGY, Technology Industries of Finland and the Finnish Information Processing Association, TIVIA.
Read more about outsourcing personal data processing on out blog.
For more information, please contact:
Mikko-Pekka Partanen
Kimmo Rekola
Latest news
Latest references
Municipality of Tuusula – Data centre project
We are assisting the Municipality of Tuusula in the sale of land to funds managed by Blackstone, a global asset management company, for a data centre project. Currently, a preliminary agreement has been signed for the sale of the approximately 16.7 hectare site in Jokela, Tuusula. In October 2025, the Municipal Council of Tuusula approved zoning amendments that enable the construction of a data centre campus in the Vallunlenkki zoning area. The preliminary agreement on the sale of the land and the approval of the zoning are the first steps in a process that would upon its implementation constitute a significant investment that supports employment and economic growth in Tuusula and its surroundings. The next phase, the environmental impact assessment, is planned to commence in early 2026. Blackstone owns QTS, one of the worlds’s fastest growing data centre platforms with more than 82 data centres in operation or under development across Europe and the United States.
Case published 4.12.2025
OP-Public Services Real Estate Fund – Sale of seven preschool properties
We are assisting OP-Public Services Real Estate Fund in the sale of seven preschool properties to Kinland AS. The transaction value is approximately EUR 24 million, and the majority of the properties are located in the Greater Helsinki area. The portfolio comprises high-quality assets with EPC ratings of A or B, with most properties achieving the highest rating of A. The properties are leased to one of the sector’s leading private operators under lease agreements with a weighted average unexpired lease term of approximately 10 years. The transaction is expected to close on 18 December 2025.
Case published 2.12.2025
CapMan Growth – Investment in restaurant chain Factory
We are assisting CapMan Growth in making a significant investment in Factory, a Finnish restaurant chain known for its high-quality homemade meals and excellent value for money. The investment supports Factory’s ambitious growth strategy to expand nationwide and strengthen its presence also in shopping centres. Industry veteran Aku Vikström also joins as a co-investor and member of the board to support the company. Factory is a restaurant chain that specialises in high-quality homemade meals. In addition to buffet offerings, Factory provides catering services for meetings and events. All dishes are prepared in Factory’s own restaurant kitchens by the restaurants’ own chefs, and the menu focuses on diverse, high-quality home cooking. The company currently operates 22 restaurants in Southern Finland and employs around 200 people. CapMan Growth is a leading Finnish growth investor that makes significant investments in entrepreneur-led growth companies with turnover of €10–200 million. CapMan Growth is part of CapMan, which is a leading Nordic private equity investor engaged in active value creation work. CapMan has been listed on the Helsinki Stock Exchange since 2001.
Case published 2.12.2025
Neste – EUR 500 million refinancing arrangement
We advised Neste Corporation on the refinancing of its EUR 500 million term facility by way of two EUR 250 million bilateral term facilities provided by OP Corporate Bank plc and Danske Bank A/S, Finland Branch. Each term facility has a maturity of three years with extension options.
Case published 25.11.2025