5.3.2018

New IT2018 General Terms and Conditions Published – Key Update, GDPR-Compliant Special Terms and Conditions Processing Personal Data

The new IT2018 general terms and conditions have just be published to replace the IT2015 general terms and conditions. The update is motivated by the EU’s General Data Protection Regulation (GDPR), which will be applied starting on 25 May 2018. The IT2018 general terms and conditions are meant to be applied in small and mid-size IT procurements between businesses.

The largest change is that special terms and conditions for the processing of personal data (EHK) have been added to help meet the GDPR’s requirements in IT deliveries. These special terms and conditions will be a welcome aid both in future IT projects and in updating existing agreements. The general terms and conditions and cloud service terms and conditions have also been updated.

The GDPR requires that the outsourcing of personal data processing must be agreed in writing between the data controller and the data processor. This means that when a supplier processes personal data on behalf of its client as part of an IT delivery, this processing requires a written agreement fulfilling certain minimum requirements. This applies to both new and existing agreements, which means that existing agreements will have to be reviewed and updated to meet the GDPR’s requirements. The GDPR sets the minimum requirements for such agreements, such as commitments to comply with the data controller’s instructions and implementing sufficient data security.

The IT2018 EHK terms and conditions meet the GDPR’s minimum requirements and can be used as a base for data processing agreements. However, when drafting an agreement, it is important to account for the nature of the product or service being delivered and to ensure that the obligations concerning, for example, data security are sufficient with respect to the risk of the processing being outsourced. The IT2018 general terms and condition assume that the EHK terms and conditions take precedence over the other IT2018 terms and conditions.

The IT 2018 general terms and conditions have been drafted in cooperation by the Finland Chamber of Commerce, Ohjelmistoyrittäjät ry, the Finnish Association of Purchasing and Logistics LOGY, Technology Industries of Finland and the Finnish Information Processing Association, TIVIA.

Read more about outsourcing personal data processing on out blog.

For more information, please contact:

Pia Ek 

Mikko-Pekka Partanen 

Kimmo Rekola

Latest references

United Bankers – Sale of three care properties
We advised United Bankers on the sale of three care properties to Kinland AS. The buildings were completed between 2021 and 2022 and meet high technical and environmental standards. All three properties are fully leased. The portfolio has a weighted average unexpired lease term of 13 years.
Case published 1.6.2026
Hiab acquisition financing
We are advising Hiab Corporation in the financing for its USD 1,035 million acquisition of Labrie Environmental Group, a leading North American refuse collection vehicle (“RCV”) manufacturer, from Wynnchurch Capital, L.P. Hiab Corporation (Nasdaq Helsinki: HIAB) is a leading provider of smart and sustainable on-road load handling solutions, with 2025 sales of approximately EUR 1.6 billion and approximately 4,000 employees, operating through a global network spanning over 100 countries. Labrie Group is a leading North American provider of RCVs, employing approximately 1,200 people. 
Case published 1.6.2026
We advised an international bank syndicate in a EUR 300 million revolving credit facility (RCF) for ICEYE, the world leader in sovereign intelligence from space. The bank-syndicate comprised Nordic and global banks, with Citi and Danske Bank acting as Joint Global Coordinators and Mandated Lead Arrangers. The RCF will support the issuance of guarantees for customer contracts, enable continued business growth, and serve as a liquidity backstop. 
Case published 21.5.2026
We are advising Terrieri Kiinteistöt Ky and A. Ahlström Kiinteistöt Oy in the sale of a modern production and logistics building complex to Swedish property investment company Catena AB. We are also assisting S-Bank Building Plot non-UCITS Fund which in connection with the transaction, has agreed to sell the land area where the building complex is located to Catena AB. The building complex located in the immediate vicinity of Helsinki-Vantaa Airport was completed in 2021 and comprises approximately 23,260 square metres of leasable area, fully leased to Cramo Finland Oy. The approximately 140,000-square-metre plot offers additional long-term development potential in the form of approximately 45,000 square metres of additional building rights.
Case published 21.5.2026