5.3.2018

New IT2018 General Terms and Conditions Published – Key Update, GDPR-Compliant Special Terms and Conditions Processing Personal Data

The new IT2018 general terms and conditions have just be published to replace the IT2015 general terms and conditions. The update is motivated by the EU’s General Data Protection Regulation (GDPR), which will be applied starting on 25 May 2018. The IT2018 general terms and conditions are meant to be applied in small and mid-size IT procurements between businesses.

The largest change is that special terms and conditions for the processing of personal data (EHK) have been added to help meet the GDPR’s requirements in IT deliveries. These special terms and conditions will be a welcome aid both in future IT projects and in updating existing agreements. The general terms and conditions and cloud service terms and conditions have also been updated.

The GDPR requires that the outsourcing of personal data processing must be agreed in writing between the data controller and the data processor. This means that when a supplier processes personal data on behalf of its client as part of an IT delivery, this processing requires a written agreement fulfilling certain minimum requirements. This applies to both new and existing agreements, which means that existing agreements will have to be reviewed and updated to meet the GDPR’s requirements. The GDPR sets the minimum requirements for such agreements, such as commitments to comply with the data controller’s instructions and implementing sufficient data security.

The IT2018 EHK terms and conditions meet the GDPR’s minimum requirements and can be used as a base for data processing agreements. However, when drafting an agreement, it is important to account for the nature of the product or service being delivered and to ensure that the obligations concerning, for example, data security are sufficient with respect to the risk of the processing being outsourced. The IT2018 general terms and condition assume that the EHK terms and conditions take precedence over the other IT2018 terms and conditions.

The IT 2018 general terms and conditions have been drafted in cooperation by the Finland Chamber of Commerce, Ohjelmistoyrittäjät ry, the Finnish Association of Purchasing and Logistics LOGY, Technology Industries of Finland and the Finnish Information Processing Association, TIVIA.

Read more about outsourcing personal data processing on out blog.

For more information, please contact:

Pia Ek 

Mikko-Pekka Partanen 

Kimmo Rekola

Latest references

We acted as Finnish law legal adviser to the lenders and the export credit agencies in connection with the EUR 514.4 million green project financing for the development and construction of Easpring Finland New Materials Oy’s cathode active material (CAM) manufacturing plant in Kotka, Finland. The borrower, Easpring Finland New Materials Oy, is a joint venture owned by Beijing Easpring Material Technology, Finnish Minerals Group and LG Energy Solution. The financing was provided by six international commercial banks, with Société Générale acting as financial adviser and mandated lead arranger together with Natixis as co-mandated lead arranger, and DNB, ICBC, ING and Standard Chartered participating as lenders, with support from the export credit agencies Finnvera and Sinosure. The project represents a significant milestone for Finland and the European battery value chain by strengthening Europe’s domestic supply of cathode active materials, a key component in lithium-ion batteries for electric vehicles and energy storage applications. Once the first phase of the project is operational, the Kotka facility is expected to produce approximately 60,000 tonnes of cathode active material annually, making it one of the largest CAM production plants in Europe and supplying leading battery manufacturers across Europe. 
Case published 21.7.2026
We acted as Finnish legal advisor to Delta Capacity in connection with its acquisition of the ready-to-build Karppio battery energy storage system (BESS) project from Helios Nordic Energy. The acquisition was made and the project will be implemented together with Strioga Family Foundation. The Karppio BESS project is located in Teuva, Finland, and has a capacity of 125 MW / 300 MWh. Delta Capacity will lead the remaining development of the project through to commissioning, planned for 2027, and will serve as long-term asset manager. Delta Capacity is a Swiss-based developer of utility scale battery storage systems. The acquisition adds to Delta Capacity’s growing Nordic portfolio. 
Case published 20.7.2026
We advised Swedbank AB (publ) on the refinancing of a large Finnish retail real estate portfolio owned by Trophi’s Finnish subsidiaries. Trophi is the leading Nordic real estate company focusing on grocery anchored retail properties, with 278 properties across Sweden and Finland. Finland is a market that continues to develop and is also strategically important for Trophi, accounting for approximately 30% of Trophi’s letting and property value.
Case published 17.7.2026
We are acting as Finnish legal advisor to HANZA in connection with its acquisition of Fortaco Finland’s heavy mechanics and assembly business. The transaction is structured as a combined asset and share acquisition and includes Fortaco Finland’s heavy mechanics and assembly operations in Finland, as well as shares in two Estonian and two Polish subsidiaries. The transaction is expected to close during the fourth quarter of 2026, subject to customary closing conditions, including regulatory approvals. Founded in 2008, HANZA is a Swedish mechanical engineering and electronics contract manufacturing company listed on the Nasdaq Stockholm main list. HANZA has approximately 5,000 employees and annual sales of SEK 10 billion. We advise HANZA on this transaction in collaboration with the Swedish law firm Lindahl.
Case published 15.7.2026