Data in a third country: access risk already contrary to data protection?
At the latest since the Schrems II ruling, it has become clear that the transfer of data to countries outside the EU (third countries) can be problematic under data protection law. But is the risk of transfer to a third country sufficient? This view is...
First legally binding judgment on damages due to data leak - Scalable must pay
The Munich-based fintech company Scalable had to report a data leak in October 2020. In December 2021, the Munich Regional Court awarded a plaintiff damages for non-material loss. Scalable has now withdrawn the appeal it filed. What does...
Data breach due to privacy notices?
Every website that complies with data protection regulations must have a data protection notice. But how do you design them correctly? And what happens if they do not comply with the applicable data protection law? Find out everything you need to know here. Content of data protection notices According to Art. 13 DSGVO...
Videoident identification too insecure?
Identification by video (Videoident) is currently stopped at health insurance companies. The background to this is a successful attack by the Chaos Computer Club (CCC), in which access to an electronic patient file was gained by a test person with manipulated identification...
We want to know everything! - Data protection in the application
In every HR/personnel department, vast amounts of personal data are processed. Not only employees of the company are affected, but also applicants in the application process. Where do the boundaries of data protection lie here? Consent to the...
Facebook page of the federal government against data protection?
The following statement caused quite a stir: The operation of Facebook fan pages is contrary to the GDPR. However, the German government continues to have such a Facebook presence, which is operated by the Federal Press Office. The Federal Press Office is now being investigated by the...
Transparency vs. data protection - Commercial register contrary to data protection?
The Commercial Register has an online presence: www.handelsregister.de . Since the beginning of this month, all entries in the commercial register can be accessed here online free of charge and without registration. Among the data that can be retrieved here are also personal...
Red alert: Data privacy breach!
Dreaded by every company, but always topical: the data protection mishap. The great fear of a data protection breach often results from a lack of knowledge about how to deal with such a situation. Find out here what to do and how to...
Privacy glitch in spam folder
At first glance, the spam folder in the email client does not indicate a data protection breach. However, if e-mails that are supposed to be deleted are inadvertently marked as spam only, it can lead to a manual check by the e-mail provider and in the...
Threatening letter under data protection law - What to do?
Following the decision of the Munich Regional Court on compensation for pain and suffering due to non-material damage resulting from the use of Google Fonts on a website, an increasing number of threatening letters under data protection law can now be found. The authors send data protection...
English 
Deutsch 
Español 
Français 
Polski