With the establishment of the Anti-Money Laundering and Countering the Financing of Terrorism Authority (AMLA), the EU has taken a significant step toward technology-based oversight of money laundering and terrorist financing. The focus is now on the use of Supervisory Technology (SupTech): digital tools designed to increase the efficiency of supervision.
The Digital Fairness Act (DFA) is intended to protect consumers from deception, influence, and psychological manipulation in the digital space. At the same time, it aims to establish clear, uniform requirements for businesses. This article explains exactly which gaps the DFA is intended to close, what the timeline looks like, and what businesses need to prepare for.
Third-Party Risk Management (TPRM) is a key element of modern corporate governance. It lays the foundation for complying with legal requirements, reducing liability risks, and securing the trust of customers, partners, and investors. With Ailance, you can actively manage third-party risks.
The data protection assessment of Health data In an employment relationship, this is one of the most sensitive issues in the Compliance-Practice. A recent development that warrants further examination is the publication by the State Commissioner for Data Protection and Freedom of Information in North Rhine-Westphalia regarding so-called “chronic illness.” What employers should keep in mind.
The German Federal Financial Supervisory Authority (BaFin) has published a circular with the Minimum Requirements for Risk Management of Securities Institutions (WpI MaRisk for short) on the Consultation has been published. This new set of regulations is explicitly aimed at small and medium-sized securities institutions. The most important points at a glance.
As of February 2, 2025, the first bans on unacceptable AI practices and AI competency requirements have become mandatory. Since August 2, 2025, specific GPAI („General-Purpose AI“) rules have been in effect under the AI Regulation. The European Commission has presented the „General-Purpose AI Code of Practice“ in this regard. We provide an overview of this code of practice and explain the benefits it offers.
Security researchers were able to gain access to the fast-food chain McDonald’s„ HR platform, McHire, using the password “123456.” This allowed access to up to 64 million records. What companies should look out for—and how Ailance helps prevent such risks.
The Digital Operational Resilience Act (DORA) has been in effect since January. In July, the European supervisory authorities EBA, ESMA, and EIOPA issued guidance on the supervision of critical third-party ICT service providers. A particular focus: critical third-party providers of information and communication technologies (CTPPs).
The current draft bill for the NIS-2 Implementation Act has been met with significant criticism from data protection supervisory authorities. The focus is on the inadequate duty to inform IT security authorities and the lack of interaction between the reporting obligations under the NIS 2 Directive and those of the GDPR. What the data protection authorities are now demanding.
Follow us on our social media channels as well:
Contact us
Phone: +1 (954) 852-1633
Mail: info@2b-advice.com
German German 
English
Italian
French
