Cybersecurity

Cybersecurity

Data is a valuable commodity in many organisations. We help you handle data in a compliant manner and protect it from misuse.

The legal requirements for cybersecurity are scattered across different regulations. The European Union is introducing a growing number of sector-specific regulations on information security requirements, such as DORA, NIS2, CRA and CER. We can help you identify the provisions that apply to your specific business and explain what they mean in practice. We speak the same language as ICT professionals. Several of our legal experts are also computer science graduates.

In addition to day-to-day advice, we can help you with a range of incidents. Data systems are vulnerable to disruptions and outside threats. In emergencies, the statutory and contractual obligations relating to data and personal data must be fulfilled in order to mitigate risks and safeguard your business’s ability to operate as effectively as possible. Our experts are experienced at resolving a wide range of disruptions, whether they originate from inside or outside the company.

Latest references

The Finnish Ministry of Foreign Affairs – A precedent setting cyber security incident court case

The Finnish Supreme Administrative Court has handed down decision KHO 2024:115 on balancing data protection and national security interests in cyber security incidents. We acted for the Finnish Ministry of Foreign Affairs in this precedent setting case, in which the Supreme Administrative Court agreed with our client’ core submissions and decided to overturn key parts of a data protection authority decision against our client. The court held that the Ministry had acted lawfully when taking a bit of time between discovering information about a cyber incident concerning certain diplomats and notifying all potentially affected people. The key point of principle for our client was the extent to which Article 34 of the GDPR requires such (essentially public) notifications when foreign policy and national security might require a more discrete initial approach. The court’s reasoning is important: since Finland has voluntarily, but not unreservedly, extended the scope of the GDPR to also cover foreign policy and national security, the primacy of EU law does not apply in that extended context. Thus, more specific local Finnish rules on freedom of information/confidentiality in these areas override the general Article 34 notification obligation (under the classic lex specialis derogat legi generali rule), even absent express statutory carve-outs to Article 34. Had Article 34 applied as a matter of EU law, the outcome could have been different, since the GDPR, under primacy, would override all local Finnish rules, irrespective of whether they are lex specialis or not. It’s important to understand why, and on what basis, an EU law applies to any given situation, since this could affect the principles of interpretation so much that the outcome changes significantly. The court did, however, hold that the Ministry will need to notify the DPA itself within the customary deadlines, since the DPA under Finnish law has the right to receive information confidentiality rules notwithstanding. We hope this outcome will contribute to authorities dealing with foreign policy and national security being able to balance all relevant interests going forward. Read the decision in Finnish or in Swedish .

Jolt Capital and Tesi – Investment in VEV

We advised Jolt Capital and Tesi in connection with their investment in VEV, a leading provider of commercial fleet electrification solutions. The investment, led by Jolt Capital with Tesi as co-investor, will support VEV’s next phase of growth and expansion across Europe. As part of the transaction, VEV became an independent company following the acquisition of Vitol’s stake in the business. Founded by Vitol, VEV provides integrated fleet electrification solutions combining fleet strategy, charging infrastructure, energy supply and operational services. Through its VEV IQ platform, the company supports more than 6,000 commercial electric vehicles across Europe and has been deployed across more than 600 sites spanning the transport, logistics and waste sectors. Jolt Capital is a private equity firm focused on growth investments in European deeptech companies. Tesi is a Finnish state-owned investment company that promotes Finnish business and economic growth through investments. We advised Jolt Capital and Tesi on the equity financing and structuring aspects of the transaction. International law firm Goodwin advised the investors on the acquisition of VEV.

VR Group – Intellectual property matters

VR-Group Plc is a transport and logistics group owned by the Finnish State, operating passenger and freight rail transport in Finland with activities also in the Swedish market. VR Group provides passenger, logistics and maintenance services with over 160 years’ experience in developing responsible transport of the future. We advise VR Group in intellectual property matters as part of the company’s wider brand protection efforts. Our assignments have included advice on copyright, design rights and trademarks, focusing on the protection of the company’s visual identity – including its distinctive green colour – in connection with transport services as part of a comprehensive IP protection strategy. VR Group’s consistent brand building has also received recognition, including the Finland Chamber of Commerce’s Brand of the Year award in 2026. In the competition, brands were viewed comprehensively from various perspectives, including their story, strategic role, brand renewal ability and intellectual property protection. The jury found that VR had understood the importance of the protection of its brand as part of a comprehensive business strategy.

NoHo Partners – EUR 50 million secured notes and EUR 97 million senior secured facilities agreement

We advised NoHo Partners Plc on the issuance of EUR 50 million senior secured floating rate notes. The notes have a tenor of four years and mature on 10 September 2030. The notes bear interest at a rate of three-month EURIBOR plus a margin of 4.375 per cent. per annum. The notes were allocated to a mix of domestic and international investors. We also advised NoHo Partners on the negotiation of its new senior facilities agreement. The facilities agreement comprises a EUR 60,000,000 term loan facility, a EUR 10,000,000 capex facility and a EUR 27,000,000 revolving credit facility. “We are delighted by the interest investors have shown in the company’s Notes, which reflects confidence in our strategy. The successful issuance of the Notes, together with the new loan agreement, extends the maturity profile of our financing and enables the company to continue executing its growth strategy going forward. I would like to thank all investors for their participation, as well as our partner bank for the excellent execution of the Notes issuance”, says Jarno Suominen, CEO of NoHo Partners. OP Corporate Bank plc acted as the sole lead manager and bookrunner for the issue of the notes. NoHo Partners Plc is a Finnish group established in 1996, and it specialises in restaurant services being the creative innovator of the Northern European restaurant market. The company was listed in Nasdaq Helsinki in 2013 becoming the first Finnish listed restaurant company, and it has continued to grow strongly throughout its history. NoHo Partners’ vision is to be the leading restaurant operator in Northern Europe.

Latest insights

1.9.2026 – Intellectual Property New marketing and consumer protection requirements call for action

Hilma-Karoliina Rozell

Hilma-Karoliina Rozell

17.7.2026 – Real Estate Investments & Transactions Special features of real estate transactions in Finland: Formal requirements, permit requirements and pre-emption rights

Jessica Salmia

Elina Marttala

Jessica Salmia & Elina Marttala

18.6.2026 AI is an opportunity to reinvent legal business

Jarno Tanhuanpää

Jarno Tanhuanpää

13.5.2026 – Venture Capital & Minority Investments Newly launched Series Seed 4.0 is a comprehensive standard seed financing documentation for the Finnish market

Jarno Tanhuanpää

Tuomas Honkinen

Jussi Mäkikangas

Jarno Tanhuanpää, Tuomas Honkinen & Jussi Mäkikangas

Search from the site.