ThinkTank is your knowledge platform for data protection and Compliance. Stay up to date with ThinkTank, benefit from best practices and improve your risk management by gaining insights into fine notices and court rulings. Specialist articles and checklists also support you in your daily work.
The Federal Financial Supervisory Authority (BaFin) has published a structured overview of the documentation requirements under the Digital Operational Resilience Act (DORA). With this guidance on DORA, BaFin aims to help financial institutions quickly navigate the various legal texts.
Ailance simplifies the Compliance of your company through automated reminders and alerts for various data protection tasks. For example, an automatic alert is generated every time a processing activity needs to be checked. Here is a brief overview of how you can effectively use workflows in Ailance RoPA.
The Cyber Resilience Act (CRA) is the first EU regulation to establish mandatory cybersecurity requirements for products with digital elements. The regulation entered into force on December 11, 2024. Companies now have three years to implement the requirements. Here’s what they should keep in mind right now.
The General Data Protection Regulation (GDPR) requires the protection of individual rights, but also allows innovative approaches through Anonymization. The Data Protection Foundation has published a practical guide to Anonymization published, which provides a solid foundation for personal data How to anonymize data securely and in compliance with the law. An overview.
The Federal Labor Court (BAG) has ruled that employees who assert a new claim to continued pay during sick leave after a six-week period of illness must disclose their pre-existing medical conditions. Learn more about the ruling and use our sample letter to request that your employee disclose their medical history.
When companies report outstanding receivables to credit agencies such as Schufa, they should proceed very carefully: This is because if the main claim and secondary claim cannot be clearly separated from each other, this may constitute unauthorized data transmission - and therefore a Infringement against the GDPR. This was decided by the Schleswig-Holstein Higher Regional Court.
In November 2024, three GDPR-Fines amounting to millions were imposed on companies from Spain, Italy, and Finland. In two separate cases, the data protection authorities criticized the fact that the „Privacy by Design“ principle had been implemented only very inadequately in the data processing procedures. Here are some interesting insights that the fine notices offer for companies.
With Ailance RoPA, the data protection officer can easily create tasks (to-dos) and tailor them to specific teams, roles, or individual responsibilities. This flexibility ensures that every critical task is tracked and clearly assigned. We’ll show you how to easily create a to-do.
Follow us on our social media channels as well:
Contact us
Phone: +1 (954) 852-1633
Mail: info@2b-advice.com
German German 
English
Italian
French
