GDPR

Latest

• Data Protection and BCM: Why Resilience Only Works When Combined

  How are data protection and BCM related? The GDPR demands more than just data security; it requires availability and crisis resilience. In practice, however, data protection and business continuity management are often separated organizationally. This article shows why effective data protection fails without coordinated BCM and how companies can successfully integrate reporting requirements, recovery times, roles, and responsibilities.

  IT•Christopher Schroer•17 Jun 2025•14 minutes

  

• EU Data Act explained - GDPR 2.0, even more effort or false alarm?

  The EU Data Act follows the EU GDPR, which came into force in 2018 and ushered in a new era of data protection law. However, what previously only applied to personal data is now being applied to all types of usage data in IoT and digital products - because only what has been contractually agreed may be processed. On this basis, users are also granted far-reaching rights to the usage data in smart home appliances, for example.

  Regulations & Laws•Philipp Schneidenbach•9 Apr 2024•10 minutes

  

• Data protection and DSGVO - 5 stumbling blocks for SMEs

  For small and medium-sized enterprises (SMEs), it is often difficult to meet the data protection requirements according to the GDPR. Even with few resources for this topic, the data protection requirements apply to SMEs just as they do to larger companies, and so SMEs are not spared from audits by the data protection supervisory authorities. However, the need to act in a data protection-compliant manner should not only be seen in connection with possible fines and loss of reputation, but should also be used as a competitive advantage in view of the growing importance of data protection for end customers as well as in B2B business.

  Data protection•DIGITAL BREAKFAST•26 Mar 2023•7 minutes

  

• Understanding the New EU Standard Contractual Clauses (SCC) - What to do?

  Sch-rems II rulings have shaken up international data transfers. The Privacy Shield agreement with the US was declared invalid and now most companies have resorted to the so-called EU Standard Contractual Clauses (SCC). In a second ruling, however, the ECJ also commented on the SCCs and new SCC contract sets were put on the table, which now have to be transferred.

  Data protection•Yves Gogniat•1 Nov 2021•5 minutes

  

• Data protection and bring your own device (BYOD)

  When employees use their private devices, such as smartphones or laptops, as work equipment, it becomes complicated for employers. On the one hand, employees want to work on their familiar devices, but on the other hand, management is obliged to comply with data protection. However, this dilemma between practicality and compliance can be solved.

  Data protection•Karin Dietl•31 Jan 2021•5 minutes

  

• General Data Protection Regulation (GDPR) explained - Overview and simple explanation

  On 25 May 2018, the basic data protection regulation (GDPR) was introduced, which applied data protection rules to all companies worldwide, provided that they manage or store data of EU citizens. There are some rules to follow and it is advisable to implement them, otherwise high penalties are imminent.

  Legal•Benjamin Talin•29 Sept 2020•9 minutes

  

• What does the General Data Protection Regulation (GDPR) mean for companies outside the EU?

  How does the new General Data Protection Regulation (GDPR 2018) affect entrepreneurs who are not in the EU? We will show you how you can address this topic in your company.

  Legal•Yves Gogniat•29 Sept 2020•6 minutes

  

• Data protection and coronavirus - 11 measures for handling data during a crisis

  Many companies allow their employees to work from home due to the spread of the corono virus. As a preventive measure, companies also process health data to better protect themselves against the spread of COVID-19. However, both strategies can lead to considerable risks from a data protection perspective.

  Data protection•Karin Dietl•22 Mar 2020•4 minutes

  

• What does the General Data Protection Regulation (GDPR) mean for companies outside the EU?

  Until now, EU Data Protection Laws have only applied to companies with a presence in the EU. The General Data Protection Regulation (GDPR) now deviates from this principle, with the consequence that the new law not only affects companies within the EU but also countries outside its borders. In certain situations, the GDPR is also applicable to companies (controllers) outside the EU. The potential cross-border applicability has left many companies outside the EU confused, and it has led to uncertainty.

  Data protection•Yves Gogniat•11 Jul 2019•12 minutes