Data Use and Data Sharing

Data Use and Data Sharing

Digital and data legislation is developing rapidly, establishing rights and obligations for those creating and using data. We can help you align your operations with regulatory requirements and advise you on how to make the most of the opportunities presented.

When using and sharing data, it is important to identify the types of data used and shared and the rights and restrictions involved. Detailed agreements are key when data is collected, analysed, stored and transferred, or used for various purposes and shared between operators. The agreements must be in line with business objectives and the special characteristics of data utilisation in different fields.

High-quality and accessible data gives companies a significant competitive advantage and a tool for creating value. We have helped clients in various fields to use and share data appropriately while comprehensively accounting for regulatory issues that, in addition to digital and data regulation, such as the requirements of the Data Act and the Data Governance Act.

Data use and data sharing may also include aspects of competition law. As our client, you will also have the support of our competition lawyers in data issues.

Latest references

We successfully represented insurance companies LähiTapiola and OP Henkivakuutus in two cases concerning an important point of principle: the right of insurance companies to process health data as part of the insurance application process. The Supreme Administrative Court handed down twin decisions ( one published as precedent ) addressing the matter in light of contrary DPA decisions. Under the Finnish Data Protection Act, insurance companies may, to simplify, process health data concerning “insured persons” (vakuutettu, försäkrad) to determine liability under the insurance. This rule constitutes an exception to Article 9 GDPR. At issue was whether the term “insured person” also covers people in the process of obtaining insurance coverage or only people who are already covered. In more practical terms: can an insurance company rely on the rule when considering whether/how to grant the insurance in the first place? The SAC answered in the affirmative and thus upheld the traditional industry approach over the DPA’s contrary view. The SAC noted that the Data Protection Act did not define the term “insured person” and thus looked at insurance legislation for guidance. As argued by the insurance companies, that legislation also uses the term in the context of describing the insured person’s pre-contractual informational obligations. Thus, and in view of the underlying purpose of the rule at issue, the SAC found that an “insured person” could be someone in the process of obtaining coverage, not just a person already covered. The outcome clarifies the scope of the local rule at the insurance application stage for the Finnish insurance industry.
Case published 22.1.2026
We acted as legal adviser to Banyan Software on its acquisition of Carus Ferry, a Finland-based provider of reservation, check-in and port operations software for ferry and passenger shipping operators. The acquisition further strengthens Banyan Software’s presence in the Nordic region while providing Carus with a long-term partner to support its continued growth and development. Carus was founded in 1998 and is headquartered in Mariehamn on the Åland Islands, Finland. The company develops mission-critical software for ferry, cruise and passenger shipping operators, covering the full passenger journey from booking and ticketing to capacity management, check-in and boarding. Carus also provides port automation, onboard sales systems and business information tools. The company serves approximately 30 operators across four continents and is the largest vendor by customer count in ferry reservation and departure control. Banyan Software is an acquirer and long-term operator of mission-critical software businesses serving specialised industries. Founded in 2016, Banyan follows a buy-and-hold-for-life approach and supports the long-term growth and development of its portfolio companies. Banyan operates more than 130 portfolio companies across North and South America, the United Kingdom, Europe and APAC. Following the acquisition of Carus, Banyan operates three businesses in the Nordic region.
Case published 20.10.2026
We advised Move Energy as an investor in connection with the combination of 3North Partners Plc and Steady Energy Oy and the related private placement and initial public offering of the combined company on Nasdaq First North Growth Market Finland. In connection with the transaction, 3North Partners received approximately EUR 69.8 million in investor commitments from a group of institutional and other investors, including Move Energy, to fund the combined company. Steady Energy is a Finnish nuclear technology company developing a new generation of small modular reactors (SMRs) particularly suited for district heating. Its LDR-50 reactor is designed to provide cities and utilities with a scalable and low-carbon alternative to combustion-based heat production.
Case published 19.10.2026
We advised Efima Oyj on the sale of its AI business to Better Care Technologies Oy. The transaction included Efima’s Moiva AI platform developed for the care sector, the related technology and brand, customer contracts, and the experts working in the business. Efima is a Finnish digital company that supports the sustainable growth of large and mid-sized companies by streamlining their business processes and by creating competitive advantage through the innovative use of artificial intelligence and data. The company has nearly 200 experts based in Helsinki and Tampere. 
Case published 21.9.2026