Charlotta Sittnikow

Counsel

Joined Firm: 2001
Languages: English, Finnish, Swedish, French

+358 (0)9 668 95282
+358 (0)40 522 6155
charlotta.sittnikow@waselius.fi
View on LinkedIn
Download vCard
Download CV

Charlotta Sittnikow has over 20 years’ experience advising domestic and international clients in Finland and abroad.

Data Protection & Privacy

Charlotta has a primary focus on data protection and privacy, with extensive expertise in the GDPR and complex data protection matters. She advises clients on a broad range of privacy and data protection issues, including complex compliance projects, regulatory investigations and authority interactions, data breach response, and data protection aspects of technology transactions and M&A.

Technology & Digital Regulation

Charlotta also advises on technology, e-commerce and consumer law, as well as broader regulatory and compliance matters, particularly in the telecommunications, technology and digital sectors. Her experience includes technology-related projects, cybersecurity, AI governance, digital business models and emerging digital regulation. She advises clients on complex issues at the intersection of privacy, technology and digital regulation.

Practice areas

Career and qualifications

Waselius Attorneys 2001-; Secondment Mannheimer Swartling, Moscow 2008-2009; Visiting lawyer at Nokia Corporation 2006-2007; District Court of Vantaa, court traineeship (2002-2003); European Parliament, Strasbourg, Trainee 1999.

Certified CIPP/E (Certified Information Privacy Professional / Europe, IAPP 2019).

Education: University of Helsinki, LL.M. 2001; Trained on the Bench, 2003

Selected experience

  • Successfully advised a Finnish consumer financial services provided before the Finnish Data Protection Ombudsman in a case relating to cookie compliance, privacy transparency requirements and cross-border data transfers.
  • Advising digital service providers on their regulatory obligations in Finland under the EECC (as implemented in Finland), NIS2 and related Finnish legislation as well as on notification obligations relating to personal data breaches, security incidents and service disruptions.
  • Advising Finnish mutual insurance company on the development and implementation of AI policies and governance processes.
  • Advisor to multinational insurance company’s policy holders in events falling within the cyber risk insurance policy.
  • Advised a foreign baking and payment technology service provider on the regulatory requirements applicable to the provision of its cloud-based banking and payments technology services in Finland, with a particular focus on GDPR compliance, international data transfers, DORA, cybersecurity regulation and the implementation of the NIS2 framework
  • Advised a Finnish alternative investment fund management company on a broad range of data protection matters, including internal privacy due diligence exercises, review of DPIAs and data processing agreements, and ongoing regulatory compliance issues under the GDPR
  • Advisor to international retailer on various data protection and privacy matters relating to customer identification and verification processes, privacy risk management, data retention requirements and DPIA obligations
  • Advised Hoist Finance on its acquisition of an unsecured consumer credit portfolio from Lowell Group
  • Acquisition by Allison Transmission of Dana’s Off-Highway Business
  • Acquisition by AcadeMedia of Touhula Päiväkodit
  • Acquisition by CMA CGM of Bolloré Logistics

Member

Finnish Bar Association (2005); Finnish Law Society; AIJA - International Association of Young Lawyers; ITechLaw – International Technology Law Association; Finnish IT Law Association, IAPP (International Association of Privacy Professionals)

Recent publications

Charlotta Sittnikow is a well-seasoned lawyer, always ready to assist and provide clear and pragmatic solutions for our clients. It is a pleasure to work with Charlotta, particularly on tasks which are time and content-challenging.
– The Legal 500, 2025 (TMT)