The European Court of Justice upheld the action against the Appropriateness decision between the EU and the USA, thus confirming the validity of the EU-US Data Privacy Framework. Even if the Appropriateness decision legal certainty, companies are still obliged to actively manage the transfer of data to the USA.
The GDPR and the KI-VO oblige companies not only to comply with regulatory requirements, but also to provide evidence of their Compliance. This proof is provided via various documentation requirements. In practice, however, many companies either document too much or too little. The right approach lies in the middle.
OneTrust is not the only solution for data protection management. Whether you're an SME or a large corporation, discover 11 powerful alternatives that offer EU hosting, flexible workflows and practical functions. From caralegal and DataGuard to Ailance from 2B Advice: find the right software to make your data protection processes leaner and more efficient.
The EU Data Act introduces a major change for the European data market: Providers of Cloud- Data processing service providers are required to actively assist their customers in switching providers. This is intended to reduce lock-in effects and enable companies to flexibly transfer their data and digital assets.
The Cologne Administrative Court has allowed the Federal Press Office to continue operating the Facebook fan page for the German government. The proceedings focused in particular on the question of whether the operation of a Facebook fan page by a federal authority is permissible under data protection law and to what extent there is joint responsibility with the operator of the network.
Cookie banners have long been part of everyday life, but their legal admissibility remains controversial. Particularly controversial is the question of whether so-called "pay or okay" models are compatible with the GDPR are compatible. In its ruling of 13.08.2025, the Austrian Federal Administrative Court drew a clear line in this regard for the first time.
BaFin clarifies: During the initial review of the DORA requirements, it will be necessary for affected financial institutions. The specific points involved and why the BaFin announcement does not mean a carte blanche for financial institutions.
When the second implementation phase of the AI Regulation comes into force on August 2, 2025, the general regulations for providers of general-purpose AI (GPAI) will be activated. We provide an overview of which companies are affected and what regulatory requirements apply to them.
The European Commission has presented a solution for EU age verification. It should enable users to prove their age (e.g. 18 years) without disclosing personal data. This system is part of the implementation of the Digital Services Act. How it works, the planned timeline and how companies can benefit from it.
You can also follow us on our social media channels:
Contact us
Phone: +1 (954) 852-1633
E-Mail:info@2b-advice.com
German German 
English
Italian
French