Regulatory Investigations and Disputes

Regulatory Investigations and Disputes

Disputes relating to data protection and data regulation are on the rise. We offer you a team with a solid experience in authority proceedings and disputes in the field of data protection and regulation.

The increasing value of personal and other data also means that contracting parties are becoming more vigilant in protecting their interests, and people are more aware of their rights with respect to data processing. Sometimes the parties’ interests and rights intersect to such an extent that it is necessary to resort to dispute resolution procedures.

Our highly experienced experts regularly assist clients in administrative, civil and criminal proceedings. We have received a great deal of praise from clients for our efficient and skilled handling of proceedings and our wide range of expertise and understanding of regulation, technology and business.

Latest references

The Supreme Administrative Court (SAC) issued a significant precedent (decision KHO:2025:23) in a case in which it found that the Finnish Motor Insurers’ Centre (Liikennevakuutuskeskus, LVK) processed patient data in accordance with the requirements concerning fairness, data minimisation, and privacy by design and by default when deciding on compensation claims. We represented LVK in this case in which the SAC upheld the Administrative Court’s decision to repeal the EUR 52,000 administrative fine imposed on LVK by the Sanctions Board of the Office of the Data Protection Ombudsman. The SAC also confirmed the Administrative Court’s decision, which, as far as we know, was the first of its kind in Finland, ordering the Office of the Data Protection Ombudsman to reimburse some of our client’s legal costs. The decision bears great significance for the insurance industry as a whole. The crux of the matter were LVK’s information requests under the Motor Liability Insurance Act for patient data that were essential in determining insurance or compensation claims. In certain cases, making a decision may require extensive patient data. The Office of the Data Protection Ombudsman had found that LVK had systematically made overly broad information requests infringing Articles 5 and 25 of the GDPR and that the information should have been provided in the form of separate medical opinions. The Administrative Court repealed the Data Protection Ombudsman’s decision and found that patient records from medical appointments are, as a general rule, essential in establishing causality in compensation matters. It also stated that the tasks related to the consideration of compensation matters are specifically the core tasks of the insurance company and not of the controller of patient data. Furthermore, the Administrative Court found no evidence indicating that LVK would have systematically made overly broad information requests. ‘Once again, our collaboration with C&S was seamless throughout this extensive process, and we could trust that our case was in expert hands’, says Visa Kronbäck, Chief Legal Officer of the Insurance Centre. The full decision is available on the SAC website (in Finnish):  KHO:2025:23.
Case published 18.6.2025
United Bankers – Sale of three care properties
We advised United Bankers on the sale of three care properties to Kinland AS. The buildings were completed between 2021 and 2022 and meet high technical and environmental standards. All three properties are fully leased. The portfolio has a weighted average unexpired lease term of 13 years.
Case published 1.6.2026
Hiab acquisition financing
We are advising Hiab Corporation in the financing for its USD 1,035 million acquisition of Labrie Environmental Group, a leading North American refuse collection vehicle (“RCV”) manufacturer, from Wynnchurch Capital, L.P. Hiab Corporation (Nasdaq Helsinki: HIAB) is a leading provider of smart and sustainable on-road load handling solutions, with 2025 sales of approximately EUR 1.6 billion and approximately 4,000 employees, operating through a global network spanning over 100 countries. Labrie Group is a leading North American provider of RCVs, employing approximately 1,200 people. 
Case published 1.6.2026
We advised an international bank syndicate in a EUR 300 million revolving credit facility (RCF) for ICEYE, the world leader in sovereign intelligence from space. The bank-syndicate comprised Nordic and global banks, with Citi and Danske Bank acting as Joint Global Coordinators and Mandated Lead Arrangers. The RCF will support the issuance of guarantees for customer contracts, enable continued business growth, and serve as a liquidity backstop. 
Case published 21.5.2026