Privacy archives

Federal Data Protection Commissioner: Caution with health data

by Tessa Lamken | Apr 10, 2022 | Privacy

Federal Data Protection Commissioner Ulrich Kelber has now presented his activity report for 2021. In particular, he warned in this against the too easy handling of health data by the developments of the Corona pandemic. Legal regulation for the processing of...

Two-factor authentication hacked

by Tessa Lamken | Apr 1, 2022 | Privacy

Two-factor authentication (also known as 2FA) is used for additional security when logging in, which is otherwise usually only secured with a password and user name. In some cases, multi-factor authentication (MFA) is also used for this purpose. With some of these...

Driver's license: control by the employer compliant with data protection?

by Tessa Lamken | Mar 28, 2022 | Privacy

In companies with a fleet of vehicles or in industries where business trips are the order of the day, employers regularly check their employees' driver's licenses. How this control can be designed in accordance with data protection and when it is necessary at all....

Photo transfer and data protection

by Tessa Lamken | Mar 25, 2022 | Privacy

More and more banks are offering the so-called photo transfer service. Here, the account holder can take a photo of a bill he wants to pay with his smartphone. This bill is then paid immediately via the corresponding banking app. Quickly...

"Pre-employment screening": data protection in the personnel selection process

by Tessa Lamken | Mar 7, 2022 | Privacy

When a company needs to fill a new position, personnel managers try to fill it in the best possible way with the help of a personnel selection process. It is not uncommon for them to do their own research in order to obtain more information about the applicant or...

Person responsible: Also managing director of a limited liability company in addition to the company

by Tessa Lamken | Feb 21, 2022 | Privacy

In its ruling of November 30, 2021 (case number 4 U 1158/21), the Dresden Higher Regional Court ordered a company and its managing director jointly and severally to pay damages under the GDPR. The court also regarded the managing director as...