


Data protection in banking
Data protection in banking Banks and financial institutions process a lot of personal data. In doing so, they are also subject to the requirements of the GDPR. These requirements must be met not only in the branch, but also in online banking. The...
Data protection and employee time recording
What employers need to bear in mind in terms of data protection law when recording time digitally Working time is now recorded digitally at many workplaces. While this usually provides more transparency and saves time and effort, on the other hand it means...
New EU Directive on Notified Bodies
New EU whistleblower directive The new EU whistleblower directive will apply from December 17, 2021. This initially obliges companies with at least 250 employees and, from December 17, 2022, also companies with at least 50 employees to report...
Data protection and software development
Data protection and software development Software developers are often confronted with the hurdles of data protection. The impression quickly arises here that data protection and software development are two incompatible topics. Therefore, the following...
Fine due to outdated software when operating a web store
Fine due to outdated software when operating a web store A company from Lower Saxony was recently fined €65,500 for operating a web store with outdated software. The security vulnerabilities caused by the old software version...
GDPR fine for Amazon: 746 million euros
GDPR fine for Amazon: 746 million euros Due to a class action lawsuit filed by more than 10,000 people and the French civil rights organization "La Quadrature du Net", which is not only against Amazon, but also against Google, Apple, Microsoft and Facebook,...
Data protection and autonomous driving
Data protection and autonomous driving According to the German government, autonomous driving cars are to be tested in regular operation in projects starting in 2022. However, it is in the nature of self-driving and connected cars that a lot of data (including sensitive data) is generated,...
Liability of the Managing Director for Information Security in the Company
Liability of the managing director for information security in the company Nowadays, it is hard to imagine a company without IT and digital business processes. However, in addition to the many advantages of digitization, it also offers high risks: If every...
Digital certificates from 2023
Digital credentials The Online Access Act (OZG) stipulates that citizens and companies must be able to use all administrative services directly, easily and securely online by the end of 2022 at federal, state and local level. An initial implementation project...
Are GDPR fines - insurable?
Are GDPR fines - insurable? Compared to its legal predecessor, the GDPR contains stricter sanction mechanisms. The aim of this is to ensure that the provisions of the GDPR are actually complied with. Article 83 of the GDPR contains a sanction option: The...