On July 15, 2021, the Luxembourg data protection authority, the Commission Nationale pour la Protection des Données (CNPD), imposed a record fine of 746 million euros on Amazon Europe Core S.à r.l. The Administrative Court of Luxembourg upheld this decision in its entirety on March 18, 2025.
Is a police officer who carries out a database query without official cause a controller within the meaning of the General Data Protection Regulation (GDPR)? The Stuttgart Higher Regional Court has examined this question in detail - and has come to a clear conclusion. Why employee excess can be really expensive.
Customer database records contain personal information such as names, addresses, contact information, and purchase histories, which can be used for targeted customer outreach and personalized service. However, handling this data poses significant data protection risks. How to avoid common data protection risks—with a checklist.
In a recent decision, the Administrative Court clarified that the data protection requirements for cookie banners must be strictly adhered to and that there is no room for exceptions. The acceptance or rejection of Cookies must be equally possible.
Those without Consent contacted for advertising purposes can, of course, demand that they cease and desist. However, this does not automatically give rise to a claim for damages. As the Federal Court of Justice (BGH) clarifies, the Affected parties rather prove that the Infringement tangible damage has actually occurred.
Is an individual entitled to inspect a data processing agreement concluded between a broadcaster and a debt collection agency pursuant to Art. 28 GDPR? GDPR? The Administrative Court (VGH) in Munich has answered the question quite clearly.
The case before the Federal Fiscal Court concerned the question of whether the tax office, as the responsible authority, can refuse to provide information on the grounds that doing so would require a disproportionate amount of effort.
Attention companies! Invoices sent by email should always be securely encrypted. This is because if no adequate security measures are taken to protect personal data, the sender is liable for misuse of the invoice by Third.
The French data protection authority, CNIL, has developed a practical guide for conducting Transfer Impact Assessments (TIA). This process enables companies to assess the level of data protection in the recipient country and to implement appropriate safeguards.
Follow us on our social media channels as well:
Contact us
Phone: +1 (954) 852-1633
Mail: info@2b-advice.com
German German 
English
Italian
French
