Regulatory Investigations and Disputes

Regulatory Investigations and Disputes

Disputes relating to data protection and data regulation are on the rise. We offer you a team with a solid experience in authority proceedings and disputes in the field of data protection and regulation.

The increasing value of personal and other data also means that contracting parties are becoming more vigilant in protecting their interests, and people are more aware of their rights with respect to data processing. Sometimes the parties’ interests and rights intersect to such an extent that it is necessary to resort to dispute resolution procedures.

Our highly experienced experts regularly assist clients in administrative, civil and criminal proceedings. We have received a great deal of praise from clients for our efficient and skilled handling of proceedings and our wide range of expertise and understanding of regulation, technology and business.

Latest references

Finnish Motor Insurers’ Centre – Precedent concerning patient data processing and repeal of administrative fine

The Supreme Administrative Court (SAC) issued a significant precedent (decision KHO:2025:23) in a case in which it found that the Finnish Motor Insurers’ Centre (Liikennevakuutuskeskus, LVK) processed patient data in accordance with the requirements concerning fairness, data minimisation, and privacy by design and by default when deciding on compensation claims. We represented LVK in this case in which the SAC upheld the Administrative Court’s decision to repeal the EUR 52,000 administrative fine imposed on LVK by the Sanctions Board of the Office of the Data Protection Ombudsman. The SAC also confirmed the Administrative Court’s decision, which, as far as we know, was the first of its kind in Finland, ordering the Office of the Data Protection Ombudsman to reimburse some of our client’s legal costs. The decision bears great significance for the insurance industry as a whole. The crux of the matter were LVK’s information requests under the Motor Liability Insurance Act for patient data that were essential in determining insurance or compensation claims. In certain cases, making a decision may require extensive patient data. The Office of the Data Protection Ombudsman had found that LVK had systematically made overly broad information requests infringing Articles 5 and 25 of the GDPR and that the information should have been provided in the form of separate medical opinions. The Administrative Court repealed the Data Protection Ombudsman’s decision and found that patient records from medical appointments are, as a general rule, essential in establishing causality in compensation matters. It also stated that the tasks related to the consideration of compensation matters are specifically the core tasks of the insurance company and not of the controller of patient data. Furthermore, the Administrative Court found no evidence indicating that LVK would have systematically made overly broad information requests. ‘Once again, our collaboration with C&S was seamless throughout this extensive process, and we could trust that our case was in expert hands’, says Visa Kronbäck, Chief Legal Officer of the Insurance Centre. The full decision is available on the SAC website (in Finnish): KHO:2025:23.

Finnish Construction Management Consultancy — District Court Dismisses charge in occupational safety offence case concerning a safety coordinator

We successfully represented a Finnish construction management consultancy and a safety coordinator employed by the company in criminal proceedings concerning an alleged occupational safety and health offence. The prosecutor sought a penalty for an alleged breach of occupational safety regulations. The charge arose from a fall accident at a construction site where our client acted as the safety coordinator appointed by the developer. We assessed the scope of the safety coordinator’s duties in relation to the responsibilities of the main contractor, as well as how our client had fulfilled their obligations in practice. We demonstrated that our client had acted with due care and in full compliance with their duties throughout the planning, preparation and execution of the construction project. The District Court of Eastern Uusimaa dismissed the charge against our client. The Court held that our client, in their capacity as safety coordinator, had duly fulfilled the occupational safety obligations incumbent on the developer during the planning and preparation phases of the construction project and had not been aware of the fall protection deficiency identified at the site. The judgment is final insofar as our client is concerned.

Efima – Sale of financial management services business

We advised Efima Oyj on the sale of its financial management services business to Rantalainen as part of its strategic focus on fully concentrating on the delivery of business applications as well as data and AI solutions. As a result of the transaction, customer contracts related to financial management services and 65 experts working in these services will transfer to Rantalainen. The transaction will be carried out as a transfer of business, and the experts will move to the new owner as existing employees. Efima is a Finnish digital company that supports the sustainable growth of large and mid-sized companies by streamlining their business processes and by creating competitive advantage through the innovative use of artificial intelligence and data. The company has nearly 200 experts based in Helsinki and Tampere.

Ugly Duckling Ventures – EUR 6.5 million funding round of Skyfora

We advised lead investor Ugly Duckling Ventures on the EUR 6.5 million funding round of Skyfora. The round also included Eviny Ventures, LUMO Labs and EIC Fund, alongside non-dilutive funding from Business Finland. The investment will support the commercial scale-up of Skyfora’s weather intelligence solutions, the expansion of partnerships with telecom operators, forecasting providers and meteorological institutions, and the continued growth of the team. Skyfora is a Finnish company developing high-resolution weather data solutions using patented technology that extracts atmospheric data from GNSS receivers embedded in existing infrastructure, such as telecom networks. By unlocking previously untapped data sources, Skyfora enables the next generation of AI-driven weather forecasting and supports improved decision-making across weather-sensitive industries. Ugly Duckling Ventures is a Copenhagen-based venture capital firm focused on early-stage Nordic B2B technology companies, with an emphasis on medtech, resilience tech and business services.

Latest insights

13.5.2026 – Venture Capital & Minority Investments Newly launched Series Seed 4.0 is a comprehensive standard seed financing documentation for the Finnish market

Jarno Tanhuanpää

Tuomas Honkinen

Jussi Mäkikangas

Jarno Tanhuanpää, Tuomas Honkinen & Jussi Mäkikangas

8.5.2026 – Environment, Energy & Green Transition Reform of Finland’s land use legislation – key takeaways for project developers

Tarja Pirinen

Marius af Schultén

Joel Aartolahti

Tarja Pirinen, Marius af Schultén & Joel Aartolahti

28.4.2026 – Private M&A Unlocking value in carve-outs – Why integration planning deserves top priority in every carve-out

Benjamin Bade

Maiju Mäkinen

Samuli Salminen

Benjamin Bade, Maiju Mäkinen & Samuli Salminen

30.3.2026 – Competition & Procurement Finnish FDI screening under reform — Update following the stakeholder consultation

Kiti Karvinen

Johanna Kyllöinen

Joachim Wik

Kiti Karvinen, Johanna Kyllöinen & Joachim Wik

Search from the site.