The central question was under what conditions a controller is liable for infringements attributable to the actions of a processor or sub-processor. The broad interpretation of the concept of participation is likely to increase the liability risks for Responsible persons increase significantly.
The European data protection authorities also imposed fines in the millions in December 2024. One fine was imposed on Meta alone Fine in the amount of 251 million euros. The mobile communications group Orange was fined 50 million euros. And a fine of 15 million euros was imposed on the ChatGPT company.
ThinkTank is your knowledge platform for data protection and Compliance. Stay up to date with ThinkTank, benefit from best practices and improve your risk management by gaining insights into fine notices and court rulings. Specialist articles and checklists also support you in your daily work.
The German Federal Financial Supervisory Authority (BaFin) has published a structured overview of the documentation requirements of the Digital Operational Resilience Act (DORA). With this guidance for DORA, BaFin wants to help financial companies to quickly find their way around the various legal texts.
Ailance simplifies the Compliance of your company through automated reminders and alerts for various data protection tasks. For example, an automatic alert is generated every time a processing activity needs to be checked. Here is a brief overview of how you can effectively use workflows in Ailance RoPA.
The Cyber Resilience Act (CRA) is the first EU legislation to lay down binding cybersecurity requirements for products with digital elements. The regulation came into force on December 11, 2024. Companies now have three years to implement the requirements. What they should consider now.
The General Data Protection Regulation (GDPR) requires the protection of individual rights, but also allows innovative approaches through Anonymization. The Data Protection Foundation has published a practical guide to Anonymization published, which provides a sound basis to personal data securely and legally compliant. An overview.
The Federal Labor Court (BAG) has ruled that employees who assert a new claim for continued payment of wages in the event of illness after six weeks of illness must disclose their previous illnesses. Find out more about the ruling and use our sample letter to ask your employee to disclose their medical history.
When companies report outstanding receivables to credit agencies such as Schufa, they should proceed very carefully: This is because if the main claim and secondary claim cannot be clearly separated from each other, this may constitute unauthorized data transmission - and therefore a Infringement against the GDPR. This was decided by the Schleswig-Holstein Higher Regional Court.
You can also follow us on our social media channels:
Contact us
Phone: +1 (954) 852-1633
E-Mail:info@2b-advice.com
German German 
English
Italian
French