Article & News

Category: Datenschutz in Deutschland

Joint liability of the business owner and the address broker in the so-called "lettershop" process.

2B Advice News

Lettershop Procedures and the GDPR: Berlin Administrative Court Rejects Joint Liability

Who is responsible under data protection law when advertising is sent through a mailing list provider? Is it the advertising company that defines the target audience, or the mailing list provider that selects the recipients?

03.06.2026

Ailance

Your RoPA is hanging on the wall. The fire is still burning.

There are processing records that look impressive. Neat columns. Well-defined terms. A last-modified date that isn't too embarrassing. During an audit, you can open them up, take a quick look at

27.05.2026

Article by Aristotelis Zervos

Transcription and Speaker Identification: Data Protection Challenges Posed by Modern Meeting Technologies

Modern transcription systems not only convert speech into text, but also attempt to identify individual speakers. As a result, they are not only directly subject to the requirements of the

17.04.2026

2B Advice News

Data Act Implementation Act: What Companies Need to Do Now

With the enactment of the Data Act Implementation Act, the Data Act will soon be effectively enforced in Germany as well. Here are the steps companies should take now to prepare.

15.04.2026

Data protection in Germany

Proof of effective consent for direct marketing

The requirements for proof of effective consent for direct marketing are increasingly becoming the focus of data protection supervisory authorities. What is important now and what requirements you

31.03.2026

The internal data protection officer has special protection against dismissal

Article by Marcus Belke

Special protection against dismissal for the internal data protection officer

In Germany, the internal data protection officer enjoys far-reaching special protection against dismissal. Anyone who appoints an employee as data protection officer is therefore making a decision with long-term consequences. What this means for

10.03.2026

In the event of a data leak at the processor, the controller is liable.

Article by Aristotelis Zervos

Failure to monitor processors: BGH extends liability of the controller

A recent ruling by the Federal Court of Justice (BGH) provides clarity regarding non-material damages pursuant to Art. 82 GDPR in the event of a data leak at a former processor.

14.01.2026

Article by Aristotelis Zervos

Data protection authorities review AI use: companies must answer these 7 questions now

A few companies are currently receiving letters from data protection supervisory authorities regarding the use of AI tools. The supervisory authorities apparently want to obtain an up-to-date overview of the use of artificial intelligence in companies.

19.11.2025

Shared responsibility for social media fan page

Article by Aristotelis Zervos

Joint responsibility for social media fan page: VG Cologne puts the brakes on BfDI

The Cologne Administrative Court has allowed the Federal Press Office to continue operating the Facebook fan page for the German government. The subject of the proceedings was in particular the question of whether the operation of a

25.08.2025

In the event of continued illness, the obligation to continue to pay wages does not apply if the new illness is related to the previous one.

Article by Marcus Belke

Health data in the event of continued illness as a data protection challenge

The data protection assessment of health data in the employment relationship is one of the most sensitive aspects of compliance practice. A current occasion for in-depth discussion is the publication of the

07.08.2025

You can also follow us on our social media channels:

Phone: +1 (954) 852-1633

Mail: info@2b-advice.com

Subscribe to our newsletter

Click here, to subscribe to our newsletter on data protection and be the first to be informed about the latest developments.