Data Use and Data Sharing

Data Use and Data Sharing

Digital and data legislation is developing rapidly, establishing rights and obligations for those creating and using data. We can help you align your operations with regulatory requirements and advise you on how to make the most of the opportunities presented.

When using and sharing data, it is important to identify the types of data used and shared and the rights and restrictions involved. Detailed agreements are key when data is collected, analysed, stored and transferred, or used for various purposes and shared between operators. The agreements must be in line with business objectives and the special characteristics of data utilisation in different fields.

High-quality and accessible data gives companies a significant competitive advantage and a tool for creating value. We have helped clients in various fields to use and share data appropriately while comprehensively accounting for regulatory issues that, in addition to digital and data regulation, such as the requirements of the Data Act and the Data Governance Act.

Data use and data sharing may also include aspects of competition law. As our client, you will also have the support of our competition lawyers in data issues.

Latest references

We successfully represented insurance companies LähiTapiola and OP Henkivakuutus in two cases concerning an important point of principle: the right of insurance companies to process health data as part of the insurance application process. The Supreme Administrative Court handed down twin decisions ( one published as precedent ) addressing the matter in light of contrary DPA decisions. Under the Finnish Data Protection Act, insurance companies may, to simplify, process health data concerning “insured persons” (vakuutettu, försäkrad) to determine liability under the insurance. This rule constitutes an exception to Article 9 GDPR. At issue was whether the term “insured person” also covers people in the process of obtaining insurance coverage or only people who are already covered. In more practical terms: can an insurance company rely on the rule when considering whether/how to grant the insurance in the first place? The SAC answered in the affirmative and thus upheld the traditional industry approach over the DPA’s contrary view. The SAC noted that the Data Protection Act did not define the term “insured person” and thus looked at insurance legislation for guidance. As argued by the insurance companies, that legislation also uses the term in the context of describing the insured person’s pre-contractual informational obligations. Thus, and in view of the underlying purpose of the rule at issue, the SAC found that an “insured person” could be someone in the process of obtaining coverage, not just a person already covered. The outcome clarifies the scope of the local rule at the insurance application stage for the Finnish insurance industry.
Case published 22.1.2026
United Bankers – Sale of three care properties
We advised United Bankers on the sale of three care properties to Kinland AS. The buildings were completed between 2021 and 2022 and meet high technical and environmental standards. All three properties are fully leased. The portfolio has a weighted average unexpired lease term of 13 years.
Case published 1.6.2026
Hiab acquisition financing
We are advising Hiab Corporation in the financing for its USD 1,035 million acquisition of Labrie Environmental Group, a leading North American refuse collection vehicle (“RCV”) manufacturer, from Wynnchurch Capital, L.P. Hiab Corporation (Nasdaq Helsinki: HIAB) is a leading provider of smart and sustainable on-road load handling solutions, with 2025 sales of approximately EUR 1.6 billion and approximately 4,000 employees, operating through a global network spanning over 100 countries. Labrie Group is a leading North American provider of RCVs, employing approximately 1,200 people. 
Case published 1.6.2026
We advised an international bank syndicate in a EUR 300 million revolving credit facility (RCF) for ICEYE, the world leader in sovereign intelligence from space. The bank-syndicate comprised Nordic and global banks, with Citi and Danske Bank acting as Joint Global Coordinators and Mandated Lead Arrangers. The RCF will support the issuance of guarantees for customer contracts, enable continued business growth, and serve as a liquidity backstop. 
Case published 21.5.2026