Ailance™ Blog. Expertise & news on data protection, compliance and risk management

Data protection regulations must be observed. When preparing the annual financial statements, auditors review a wide range of company documents. In doing so, they must also comply with data protection regulations. In principle, the auditor has a right of access under § 320(2), sentence 1

Model for Data Protection Officers The dual-control principle means that important measures should not be the sole responsibility of or carried out by a single person. The goal is to limit errors and opportunities for abuse, since the likelihood that a single person could be compromised is higher

With a view of the Rhine and Cologne’s Kranhäuser, Managing Director and attorney Marcus Belke led a one-day workshop for data protection officers and users from corporate groups. The workshop focused on current developments in data protection, practical experience, and further development

Does the government agency have to comply with data protection laws regarding the “tax evader CD”? Imagine the following hypothetical scenario: German federal agencies purchase a CD containing personal data on actual and/or alleged tax evaders. The seller is, for example, a bank employee who has obtained personal banking data

Federal Court of Justice Decision by K. Schiefer In a decision dated November 11, 2009, the Federal Court of Justice (BGH) adds another building block to the framework of data protection consent. The defendant operates a customer loyalty and discount program. On the registration form, the following text appears in bold and is bordered:

Access to K. Schiefer’s Emails Access to an employee’s emails to verify a suspicion of workplace bullying is permitted only under strict conditions, since in such cases the employer must rely on the content of the emails and not merely on