Regulatory and Strategic Advice

Regulatory and Strategic Advice

We offer company management insightful strategic advice in matters concerning data and technology.

Our analytical approach is based on exceptionally extensive experience. We are well-versed in this field’s complex and broad regulatory matters, the fundamentals and special characteristics of different industries as well as the objectives and needs of our clients.

In addition to providing advice on regulation, we explain the impacts of various decisions. If you are planning to adopt a new operating model or system, we can help you weigh different scenarios and the associated opportunities and risks. Our advice covers not only the different ways of organising the ownership of data and the processing of personal data, but also how different alternatives impact your revenue model and risks.

We help company management make informed decisions on how to successfully build up operating models. Comprehensive and strategic sparring is a significant part of the legal advice we provide on data and technology matters.

Latest references

Finnish Motor Insurers’ Centre – Precedent concerning patient data processing and repeal of administrative fine

The Supreme Administrative Court (SAC) issued a significant precedent (decision KHO:2025:23) in a case in which it found that the Finnish Motor Insurers’ Centre (Liikennevakuutuskeskus, LVK) processed patient data in accordance with the requirements concerning fairness, data minimisation, and privacy by design and by default when deciding on compensation claims. We represented LVK in this case in which the SAC upheld the Administrative Court’s decision to repeal the EUR 52,000 administrative fine imposed on LVK by the Sanctions Board of the Office of the Data Protection Ombudsman. The SAC also confirmed the Administrative Court’s decision, which, as far as we know, was the first of its kind in Finland, ordering the Office of the Data Protection Ombudsman to reimburse some of our client’s legal costs. The decision bears great significance for the insurance industry as a whole. The crux of the matter were LVK’s information requests under the Motor Liability Insurance Act for patient data that were essential in determining insurance or compensation claims. In certain cases, making a decision may require extensive patient data. The Office of the Data Protection Ombudsman had found that LVK had systematically made overly broad information requests infringing Articles 5 and 25 of the GDPR and that the information should have been provided in the form of separate medical opinions. The Administrative Court repealed the Data Protection Ombudsman’s decision and found that patient records from medical appointments are, as a general rule, essential in establishing causality in compensation matters. It also stated that the tasks related to the consideration of compensation matters are specifically the core tasks of the insurance company and not of the controller of patient data. Furthermore, the Administrative Court found no evidence indicating that LVK would have systematically made overly broad information requests. ‘Once again, our collaboration with C&S was seamless throughout this extensive process, and we could trust that our case was in expert hands’, says Visa Kronbäck, Chief Legal Officer of the Insurance Centre. The full decision is available on the SAC website (in Finnish): KHO:2025:23.

Finnish Construction Management Consultancy — District Court Dismisses charge in occupational safety offence case concerning a safety coordinator

We successfully represented a Finnish construction management consultancy and a safety coordinator employed by the company in criminal proceedings concerning an alleged occupational safety and health offence. The prosecutor sought a penalty for an alleged breach of occupational safety regulations. The charge arose from a fall accident at a construction site where our client acted as the safety coordinator appointed by the developer. We assessed the scope of the safety coordinator’s duties in relation to the responsibilities of the main contractor, as well as how our client had fulfilled their obligations in practice. We demonstrated that our client had acted with due care and in full compliance with their duties throughout the planning, preparation and execution of the construction project. The District Court of Eastern Uusimaa dismissed the charge against our client. The Court held that our client, in their capacity as safety coordinator, had duly fulfilled the occupational safety obligations incumbent on the developer during the planning and preparation phases of the construction project and had not been aware of the fall protection deficiency identified at the site. The judgment is final insofar as our client is concerned.

Efima – Sale of financial management services business

We advised Efima Oyj on the sale of its financial management services business to Rantalainen as part of its strategic focus on fully concentrating on the delivery of business applications as well as data and AI solutions. As a result of the transaction, customer contracts related to financial management services and 65 experts working in these services will transfer to Rantalainen. The transaction will be carried out as a transfer of business, and the experts will move to the new owner as existing employees. Efima is a Finnish digital company that supports the sustainable growth of large and mid-sized companies by streamlining their business processes and by creating competitive advantage through the innovative use of artificial intelligence and data. The company has nearly 200 experts based in Helsinki and Tampere.

Ugly Duckling Ventures – EUR 6.5 million funding round of Skyfora

We advised lead investor Ugly Duckling Ventures on the EUR 6.5 million funding round of Skyfora. The round also included Eviny Ventures, LUMO Labs and EIC Fund, alongside non-dilutive funding from Business Finland. The investment will support the commercial scale-up of Skyfora’s weather intelligence solutions, the expansion of partnerships with telecom operators, forecasting providers and meteorological institutions, and the continued growth of the team. Skyfora is a Finnish company developing high-resolution weather data solutions using patented technology that extracts atmospheric data from GNSS receivers embedded in existing infrastructure, such as telecom networks. By unlocking previously untapped data sources, Skyfora enables the next generation of AI-driven weather forecasting and supports improved decision-making across weather-sensitive industries. Ugly Duckling Ventures is a Copenhagen-based venture capital firm focused on early-stage Nordic B2B technology companies, with an emphasis on medtech, resilience tech and business services.

Latest insights

13.5.2026 – Venture Capital & Minority Investments Newly launched Series Seed 4.0 is a comprehensive standard seed financing documentation for the Finnish market

Jarno Tanhuanpää

Tuomas Honkinen

Jussi Mäkikangas

Jarno Tanhuanpää, Tuomas Honkinen & Jussi Mäkikangas

8.5.2026 – Environment, Energy & Green Transition Reform of Finland’s land use legislation – key takeaways for project developers

Tarja Pirinen

Marius af Schultén

Joel Aartolahti

Tarja Pirinen, Marius af Schultén & Joel Aartolahti

28.4.2026 – Private M&A Unlocking value in carve-outs – Why integration planning deserves top priority in every carve-out

Benjamin Bade

Maiju Mäkinen

Samuli Salminen

Benjamin Bade, Maiju Mäkinen & Samuli Salminen

30.3.2026 – Competition & Procurement Finnish FDI screening under reform — Update following the stakeholder consultation

Kiti Karvinen

Johanna Kyllöinen

Joachim Wik

Kiti Karvinen, Johanna Kyllöinen & Joachim Wik

Search from the site.