Litigation readiness as an element of modern compliance
Why compliance alone is no longer enough. In an increasingly regulated and digitalised world, compliance has become indispensable for any reputable company. Only those who…
The EU Pay Transparency Directive
What claims for damages does the Directive provide for?. For breaches of duty in the area of pay transparency, the Directive contains an opening clause…
Planned changes to the AI Act
Why should the AI Act be amended?. Firstly, it is unusual that the amendment to the AI Act is to take place before almost all…
CJEU establishes guidelines for the abuse of the right of access
The ruling. The CJEU has, for the first time, expressly confirmed that an initial request for access may constitute an abuse of rights. The decisive…
Data Act: Planned changes through Omnibus IV
The Data Act is set to become the EU’s central data law and is being updated by the Commission for this purpose. We explain what…
Group turnover as a benchmark for GDPR fines
CJEU ruling. The CJEU confirms the first question. The term “undertaking” in Art. 83 GDPR is to be interpreted within the meaning of Art. 101…
CJEU: non-material damage, injunctive relief, assessment of damages
The ruling. The CJEU clarified that the GDPR itself does not provide for a general right to injunctive relief that could be asserted independently of…
Cyber Resilience Act (CRA)
The Cyber Resilience Act (CRA) is a new EU regulation that sets binding security standards for products with digital elements. We explain the cybersecurity requirements…
International Data Protection Day 2026
Data protection as protection against structural imbalance of power. The origins of Data Protection Day date back to 28 January 1981. On that day, Convention…
Does the host-provider privilege apply to data protection violations?
The CJEU ruling. For the first question, the CJEU finds that the operator of an online marketplace is a controller within the meaning of Art.…
Bereit für NIS2? Warum Automatisierung Ihr Rettungsanker für Compliance ist
**Von der Verpflichtung zum Vorteil: Die Einhaltung der Cybersicherheitsvorschriften zu einem strategischen Asset machen.** Cyber-Sicherheitsbedrohungen nehmen zu, ebenso wie der Druck, den sie auf Organisationen…
KI-gestützte Anonymisierung: So verbessert Technologie den Datenschutz in Mitarbeiterbefragungen
Der Datenschutz geht über die bloße Einhaltung gesetzlicher Vorschriften hinaus – im Grunde geht es darum, Vertrauen aufzubauen. Egal, ob Sie mit Kundendaten oder internen…