Data protection

Latest

• NIS2 explained in detail for small and medium-sized enterprises

  The NIS2 Directive will affect around 29,500 companies in Germany from 2026, including many SMEs. In future, management will bear personal responsibility for information security, risk management, and business continuity. Fines can be up to €10 million or 2 percent of turnover. Core obligations include the introduction of an ISMS (e.g., ISO 27001 or VdS 10000), the systematic anchoring of risk management and business continuity, and compliance with incident reporting requirements (24 hours, 72 hours, 1 month). In addition, companies must take into account overlaps with the GDPR, the Supply Chain Act, and the Cyber Resilience Act. Conclusion: NIS2 is not purely an IT issue, but a matter for top management. Acting early strengthens security, resilience, and trust in the supply chain.

  IT-Security & Cyber Security•Christopher Schroer•30 Sept 2025•13 minutes

  

• Data Protection and BCM: Why Resilience Only Works When Combined

  How are data protection and BCM related? The GDPR demands more than just data security; it requires availability and crisis resilience. In practice, however, data protection and business continuity management are often separated organizationally. This article shows why effective data protection fails without coordinated BCM and how companies can successfully integrate reporting requirements, recovery times, roles, and responsibilities.

  IT•Christopher Schroer•17 Jun 2025•14 minutes

  

• ROI of Penetration Testing - A Strategic Investment in Cybersecurity

  Is penetration testing worth the investment? In this blog, we’ll break down the Return on Investment (ROI) of penetration testing, helping businesses understand its value beyond just being an expense.

  IT-Security & Cyber Security•Krishna Chaitanya Chaganti•22 Jan 2025•5 minutes

  

• Data protection and DSGVO - 5 stumbling blocks for SMEs

  For small and medium-sized enterprises (SMEs), it is often difficult to meet the data protection requirements according to the GDPR. Even with few resources for this topic, the data protection requirements apply to SMEs just as they do to larger companies, and so SMEs are not spared from audits by the data protection supervisory authorities. However, the need to act in a data protection-compliant manner should not only be seen in connection with possible fines and loss of reputation, but should also be used as a competitive advantage in view of the growing importance of data protection for end customers as well as in B2B business.

  Data protection•DIGITAL BREAKFAST•26 Mar 2023•7 minutes

  

• 3 Cybersecurity Tips- How To Secure Critical Assets and Data

  Cyberattacks are increasing. These 3 cybersecurity tips will help you secure your critical assets and data

  IT-Security & Cyber Security•Elijah Falode•28 Nov 2022•6 minutes

  

• Cybersecurity in home office times: 5 tips for secure network(s)

  Virtually overnight, the "analog" virus Corona is turning the classic working world upside down: home office is suddenly running like an assembly line, or as others say: "going viral". Not only the health of employees must be at the top of the agenda, but also the integrity of information worth protecting. Because this "analog" virus also serves as a backdoor for its digital cousins. The article explains how companies can protect themselves against cyberattacks in Corona times.

  IT-Security & Cyber Security•Ildikó Bruhns•13 Jan 2022•5 minutes

  

• Hard times for data transfer to third countries - "Privacy Shield" falls

  With the decision (Case C-311/18), the European Court of Justice (ECJ) has declared the so-called "Privacy Shield" for data transfers to the USA to be invalid. The use of so-called standard contractual clauses must also be viewed critically in light of US surveillance laws. Possible courses of action for data-exporting companies have therefore been restricted. This article on international data traffic shows what companies must now do.

  Data protection•Karin Dietl•24 Nov 2021•4 minutes

  

• Understanding the New EU Standard Contractual Clauses (SCC) - What to do?

  Sch-rems II rulings have shaken up international data transfers. The Privacy Shield agreement with the US was declared invalid and now most companies have resorted to the so-called EU Standard Contractual Clauses (SCC). In a second ruling, however, the ECJ also commented on the SCCs and new SCC contract sets were put on the table, which now have to be transferred.

  Data protection•Yves Gogniat•1 Nov 2021•5 minutes

  

• Blockchain in medicine & healthcare

  Most people know mainly Bitcoin as a cryptocurrency. And Bitcoin was the first cryptocurrency based on such a technology, namely the blockchain. However, the blockchain is much more than just a cryptocurrency. Blockchain can be used to implement numerous different use cases. I would like to discuss a few from the medical, pharmaceutical & health sectors here.

  Healthcare & Social Affairs•Eugen Grinschuk•23 Jul 2021•7 minutes

  

• Bye bye Privacy Shield - On the Gamechanger Ruling of the ECJ

  Privacy Shield. Over and done with. Suddenly everything is different - and without a grace period. The ECJ's ruling on Schrems II and the EU-US Privacy Shield brings the issue of EU data protection back to the forefront.

  Data protection•Philipp Schneidenbach•14 Apr 2021•6 minutes

  

• Data protection and bring your own device (BYOD)

  When employees use their private devices, such as smartphones or laptops, as work equipment, it becomes complicated for employers. On the one hand, employees want to work on their familiar devices, but on the other hand, management is obliged to comply with data protection. However, this dilemma between practicality and compliance can be solved.

  Data protection•Karin Dietl•31 Jan 2021•5 minutes

  

• Big Data - data lake versus data leak

  Data and information play an increasingly important role in companies and increasingly represent a significant production factor. The concept of so-called data lakes promises much when it comes to the analysis of such data and information, supported by machine learning and artificial intelligence. However, there are not only advantages.

  IT-Security & Cyber Security•Klaus-Peter Kaul•11 Jan 2021•4 minutes