Magazine
Archives
Articles, videos, webinars, and checklists on GDPR, AI compliance, and NIS-2 – drawn from daily consulting practice, and implementable with reasonable effort.
11-20 von 20 Beiträgen
-
Why outdated software is a preventable gateway for attacks
Outdated software is a significant and avoidable security risk. What you can do.
-
External service providers in social institutions: Why the DPA does not regulate everything
An AVV alone is not always enough in social institutions. What matters when it comes to external service providers.
-
$400 million for child data: What companies can learn from the TikTok case
The TikTok case shows how important the protection of children’s data is. What companies should consider when offering digital services. -
Recognizing known vulnerabilities in time – this is how companies prepare for it
Known vulnerabilities become a risk if security information is not implemented. -
Data processing on behalf in practice: When is a contract required?
Cloud providers, IT service providers, external software: When is contract processing involved and when is a contract required? -
Delayed GDPR access response: Does your company have to pay damages?
Requests for information under Article 15 GDPR must be answered no later than one month after the request was made. What happens if the deadline is exceeded. -
Incorrect SCHUFA entry: When is you entitled to damages under the GDPR?
Incorrect or premature reports to SCHUFA can have significant data protection consequences for companies. -
GDPR Right of Information: Unreasonable effort is not an excuse!
The right to information under Art. 15 GDPR applies even in cases of high expense. Why „unreasonable“ is not an excuse. -
Data protection vs. data security
Data protection and data security are often confused, but they pursue different goals. The difference at a glance. -
Reject all cookies?
In the case of non-essential cookies, consent is required. What matters when rejecting them in the cookie banner.
