Cookie banners have long been part of everyday life, but their legal admissibility remains controversial. Particularly controversial is the question of whether so-called "pay or okay" models are compatible with the GDPR are compatible. In its ruling of 13.08.2025, the Austrian Federal Administrative Court drew a clear line in this regard for the first time.
BaFin clarifies: During the initial review of the DORA requirements, it will be necessary for affected financial institutions. The specific points involved and why the BaFin announcement does not mean a carte blanche for financial institutions.
When the second phase of the AI Regulation takes effect on August 2, 2025, the general provisions for providers of general-purpose AI (GPAI) will go into effect. We provide an overview of which companies are affected and what regulatory requirements they must meet.
Die Europäische Kommission hat eine Lösung für eine EU-Altersverifikation vorgestellt. Sie soll es Nutzer ermöglichen, ihr Alter (z. B. 18 Jahre) nachzuweisen, ohne persönliche Daten preiszugeben. Dieses System ist Teil der Umsetzung des Digital Services Act. Wie es funktioniert, welcher Zeitablauf vorgesehen ist und wie Unternehmen davon profitieren können.
With the establishment of the Anti-Money Laundering and Countering the Financing of Terrorism Authority (AMLA), the EU has taken a significant step toward technology-based oversight of money laundering and terrorist financing. The focus is now on the use of Supervisory Technology (SupTech): digital tools designed to increase the efficiency of supervision.
The Digital Fairness Act (DFA) is intended to protect consumers from deception, influence, and psychological manipulation in the digital space. At the same time, it aims to establish clear, uniform requirements for businesses. This article explains exactly which gaps the DFA is intended to close, what the timeline looks like, and what businesses need to prepare for.
Third-Party Risk Management (TPRM) is a key element of modern corporate governance. It lays the foundation for complying with legal requirements, reducing liability risks, and securing the trust of customers, partners, and investors. With Ailance, you can actively manage third-party risks.
The data protection assessment of Health data In an employment relationship, this is one of the most sensitive issues in the Compliance-Practice. A recent development that warrants further examination is the publication by the State Commissioner for Data Protection and Freedom of Information in North Rhine-Westphalia regarding so-called “chronic illness.” What employers should keep in mind.
The German Federal Financial Supervisory Authority (BaFin) has published a circular with the Minimum Requirements for Risk Management of Securities Institutions (WpI MaRisk for short) on the Consultation has been published. This new set of regulations is explicitly aimed at small and medium-sized securities institutions. The most important points at a glance.
Follow us on our social media channels as well:
Contact us
Phone: +1 (954) 852-1633
Mail: info@2b-advice.com
German German 
English
Italian
French
