The Luxembourg data protection supervisory authority Commission Nationale pour la Protection des Données (CNPD) imposed a record fine of 746 million euros on Amazon Europe Core S.à r.l. on July 15, 2021. The Luxembourg Administrative Court confirmed this decision in full on March 18, 2025.
Is a police officer who carries out a database query without official cause a controller within the meaning of the General Data Protection Regulation (GDPR)? The Stuttgart Higher Regional Court has examined this question in detail - and has come to a clear conclusion. Why employee excess can be really expensive.
Customer database data contains personal information such as names, addresses, contact details and purchase histories, which can be used for targeted customer contact and individual support. However, there are considerable data protection risks involved in handling this data. How you can avoid typical data protection risks - with a checklist.
In a recent decision, the Administrative Court clarified that the data protection requirements for cookie banners must be strictly adhered to and that there is no room for exceptions. The acceptance or rejection of Cookies must be equally possible.
Those without Consent contacted for advertising purposes can, of course, demand that they cease and desist. However, this does not automatically give rise to a claim for damages. As the Federal Court of Justice (BGH) clarifies, the Affected parties rather prove that the Infringement tangible damage has actually occurred.
Is an individual entitled to inspect a data processing agreement concluded between a broadcaster and a debt collection agency pursuant to Art. 28 GDPR? GDPR? The Administrative Court (VGH) in Munich has answered the question quite clearly.
The question before the Federal Fiscal Court was whether the tax office, as the responsible party, can refuse to provide information on the grounds that it would require a disproportionate effort.
Attention companies! Invoices sent by email should always be securely encrypted. This is because if no adequate security measures are taken to protect personal data, the sender is liable for misuse of the invoice by Third.
The French data protection authority CNIL has developed a practical guide for carrying out Transfer Impact Assessments (TIA). This procedure enables companies to assess the level of data protection in the recipient country and take appropriate protective measures.
You can also follow us on our social media channels:
Contact us
Phone: +1 (954) 852-1633
E-Mail:info@2b-advice.com
German German 
English
Italian
French