Regulatory and Strategic Advice

Regulatory and Strategic Advice

We offer company management insightful strategic advice in matters concerning data and technology.

Our analytical approach is based on exceptionally extensive experience. We are well-versed in this field’s complex and broad regulatory matters, the fundamentals and special characteristics of different industries as well as the objectives and needs of our clients.

In addition to providing advice on regulation, we explain the impacts of various decisions. If you are planning to adopt a new operating model or system, we can help you weigh different scenarios and the associated opportunities and risks. Our advice covers not only the different ways of organising the ownership of data and the processing of personal data, but also how different alternatives impact your revenue model and risks.

We help company management make informed decisions on how to successfully build up operating models. Comprehensive and strategic sparring is a significant part of the legal advice we provide on data and technology matters.

Latest references

The Supreme Administrative Court (SAC) issued a significant precedent (decision KHO:2025:23) in a case in which it found that the Finnish Motor Insurers’ Centre (Liikennevakuutuskeskus, LVK) processed patient data in accordance with the requirements concerning fairness, data minimisation, and privacy by design and by default when deciding on compensation claims. We represented LVK in this case in which the SAC upheld the Administrative Court’s decision to repeal the EUR 52,000 administrative fine imposed on LVK by the Sanctions Board of the Office of the Data Protection Ombudsman. The SAC also confirmed the Administrative Court’s decision, which, as far as we know, was the first of its kind in Finland, ordering the Office of the Data Protection Ombudsman to reimburse some of our client’s legal costs. The decision bears great significance for the insurance industry as a whole. The crux of the matter were LVK’s information requests under the Motor Liability Insurance Act for patient data that were essential in determining insurance or compensation claims. In certain cases, making a decision may require extensive patient data. The Office of the Data Protection Ombudsman had found that LVK had systematically made overly broad information requests infringing Articles 5 and 25 of the GDPR and that the information should have been provided in the form of separate medical opinions. The Administrative Court repealed the Data Protection Ombudsman’s decision and found that patient records from medical appointments are, as a general rule, essential in establishing causality in compensation matters. It also stated that the tasks related to the consideration of compensation matters are specifically the core tasks of the insurance company and not of the controller of patient data. Furthermore, the Administrative Court found no evidence indicating that LVK would have systematically made overly broad information requests. ‘Once again, our collaboration with C&S was seamless throughout this extensive process, and we could trust that our case was in expert hands’, says Visa Kronbäck, Chief Legal Officer of the Insurance Centre. The full decision is available on the SAC website (in Finnish):  KHO:2025:23.
Case published 18.6.2025
We advised Neoen Renewables Finland Oy, part of the French Neoen Group, in its sale of a data centre project to a consortium consisting of international data centre developers and operators. This marked Neoen’s first data centre development project in Finland. Founded in 2008, Neoen is one of the world’s leading independent renewable energy producers. The company operates in 15 countries. It develops, finances, builds, owns, and operates solar power plants, wind farms, and battery storage systems. Neoen Group is owned by global alternative asset manager Brookfield Corporation.
Case published 17.9.2026
We advised Jolt Capital and Tesi in connection with their investment in VEV, a leading provider of commercial fleet electrification solutions. The investment, led by Jolt Capital with Tesi as co-investor, will support VEV’s next phase of growth and expansion across Europe. As part of the transaction, VEV became an independent company following the acquisition of Vitol’s stake in the business. Founded by Vitol, VEV provides integrated fleet electrification solutions combining fleet strategy, charging infrastructure, energy supply and operational services. Through its VEV IQ platform, the company supports more than 6,000 commercial electric vehicles across Europe and has been deployed across more than 600 sites spanning the transport, logistics and waste sectors. Jolt Capital is a private equity firm focused on growth investments in European deeptech companies. Tesi is a Finnish state-owned investment company that promotes Finnish business and economic growth through investments. We advised Jolt Capital and Tesi on the equity financing and structuring aspects of the transaction. International law firm Goodwin advised the investors on the acquisition of VEV.
Case published 10.9.2026
VR-Group Plc is a transport and logistics group owned by the Finnish State, operating passenger and freight rail transport in Finland with activities also in the Swedish market. VR Group provides passenger, logistics and maintenance services with over 160 years’ experience in developing responsible transport of the future. We advise VR Group in intellectual property matters as part of the company’s wider brand protection efforts. Our assignments have included advice on copyright, design rights and trademarks, focusing on the protection of the company’s visual identity – including its distinctive green colour – in connection with transport services as part of a comprehensive IP protection strategy. VR Group’s consistent brand building has also received recognition, including the Finland Chamber of Commerce’s Brand of the Year award in 2026. In the competition, brands were viewed comprehensively from various perspectives, including their story, strategic role, brand renewal ability and intellectual property protection. The jury found that VR had understood the importance of the protection of its brand as part of a comprehensive business strategy. 
Case published 9.9.2026