The Irish Data Protection Commission (DPC) has imposed a fine of 530 million euros on the video platform TikTok. TikTok is alleged to have transferred European users' data to China and violated transparency requirements.
2B Advice is officially certified to DIN EN ISO/IEC 27001:2024 by TÜV Saarland—a significant milestone in our ongoing commitment to meeting the highest standards in information security. This internationally recognized certification confirms the effectiveness and maturity of our Information Security Management System (ISMS).
Blockchain technologies open up new possibilities for decentralized data processing. However, their unique characteristics present significant data protection challenges that require careful scrutiny under the General Data Protection Regulation.
Will Schufa's long retention periods soon be history? The Cologne Higher Regional Court sees a Infringement against the GDPRif a credit agency does not promptly delete negative entries after debts have been settled. The Hessian data protection authority had approved Schufa's actions.
The European Commission has issued its first two penalty decisions for violations of the Digital Markets Act (DMA). Fines of 500 million euros and 200 million euros, respectively, were imposed on the U.S. technology companies Apple and Meta for various violations of DMA regulations.
In 2025, the right to Deletion according to Art. 17 GDPR at the center of a Europe-wide audit by data protection supervisory authorities. As part of the European Data Protection Board's Coordinated Enforcement Framework (CEF), companies and public bodies are being put to the test. What action is required for Responsible persons exists.
Associations are Responsible persons Under Article 4(7) of the GDPR, organizations are required to comply with all data protection requirements and to demonstrate such compliance. Implementing these requirements regularly poses significant practical challenges, particularly for smaller, volunteer-run associations. The following explanation summarizes the key obligations.
A current case before the European Court of Justice focuses on the assessment of email newsletters under data protection law. Among other things, the case addresses the distinction between direct marketing and commercial communications, as well as the applicability of the General Data Protection Regulation in relation to the ePrivacy Directive.
While Compliance-While these topics were often addressed in silos in the past, reality shows that data protection, information security, business continuity, and legal obligations are closely intertwined. This is precisely where the concept of Integrated Risk Management (IRM) comes in—an approach that does not view risks in isolation but systematically links them together.
Follow us on our social media channels as well:
Contact us
Phone: +1 (954) 852-1633
Mail: info@2b-advice.com
German German 
English
Italian
French
