The EU Data Act (EU Regulation 2023/2854) will be directly applicable in all EU member states as of September 12, 2025. We explain which entities are specifically covered by the Data Act and what new obligations apply, particularly to manufacturers and service providers.
When should a threshold analysis be conducted, how does it work, and how can one reliably determine whether a „presumed high risk“ exists? This article provides practical answers to these and other questions and demonstrates how threshold analyses can be integrated into data protection management in an effective and legally compliant manner.
If you don't recognize risks until the damage has already been done, you lose time, money, and trust. Early-warning systems are crucial; technologies such as Artificial Intelligence Automation is revolutionizing the approach to integrated risk management. Discover the benefits your company can expect and how Ailance – Integrated Risk Management can support you in this process.
A Processing directory (VVT) serves to demonstrate compliance with data protection—Compliance and the Transparency. In the following article, we answer the most important questions about the Processing directory.
CapCut, the popular video editing app from ByteDance—the company that also owns TikTok—updated its terms of service on June 12, 2025. These terms now include a comprehensive transfer of rights, which has led to ongoing criticism from legal experts and the public. We examine the associated legal risks for Responsible persons.
On June 27, 2025, the Council of the European Union adopted a draft regulation laying down additional procedural rules for the enforcement of the GDPR adopted in cross-border cases. The aim is to simplify cross-border data protection procedures in accordance with Art. 60 et seq. GDPR and make them more efficient. We provide an overview.
The highest Fine was imposed on Vodafone in Germany in June 2025. Two million-euro fines were imposed in Spain and the UK for data breaches in which the attackers gained unauthorized access to data via credential stuffing. And in Ireland, the Department of Social Services was fined a comparatively high Fine punished.
As artificial intelligence (AI) becomes increasingly widespread in businesses, the issue of developing and using AI systems in compliance with data protection regulations is becoming increasingly important. The Data protection conference (DSK) has published a guide on this topic.
On June 16, 2025, the Conference of Independent Federal and State Data Protection Supervisory Authorities (DSK) adopted the Model Guidelines for the Procedure on Fines (MRiDaVG). These are intended to establish a uniform nationwide procedural practice for data protection supervisory authorities when sanctioning data protection violations under the GDPR ensure.
Follow us on our social media channels as well:
Contact us
Phone: +1 (954) 852-1633
Mail: info@2b-advice.com
German German 
English
Italian
French
