Ailance™ Blog. Expertise & news on data protection, compliance, and risk management

Data protection regulations must be observed. When preparing the annual financial statements, auditors review a wide range of company documents. In doing so, they must also comply with data protection regulations. In principle, the auditor has a right of access under § 320 (2), sentence 1

Model for Data Protection Officers The dual-control principle means that important measures should not be the sole responsibility of or carried out by a single person. The goal is to limit errors and opportunities for abuse, since the likelihood that a single person could be compromised is higher

With a view of the Rhine and Cologne’s Kranhäuser, Managing Director and attorney Marcus Belke led a one-day workshop for data protection officers and users from large corporations. The workshop focused on current developments in data protection, practical experience, and further development

Does the government agency have to comply with data protection laws regarding the tax evader CD? Imagine the following hypothetical scenario: German federal agencies purchase a CD containing personal data of actual and/or alleged tax evaders. The seller is, for example, a bank employee who has access to personal banking data

Decision of the Federal Court of Justice by K. Schiefer With a decision of November 11, 2009, the Federal Court of Justice (BGH) adds another stone to the data protection consent edifice. The defendant operates a customer loyalty and discount system. The registration form states in bold print and with a border

Inspection of emails from K. Schiefer Inspection of an employee's emails to verify a suspicion of harassment is only permissible under strict conditions, as in such cases the employer must be able to access the content of the emails and not just the content.