Article & News

Category: Datenschutz-Grundverordnung (DSGVO)

Marcus Belke next to an Ailance graphic on evidence-based documentation in data protection management.

2B Advice News

Privacy notices do not belong in the mailbox

Data protection records are only audit-ready if the processing, risk, approval, version, and measures remain traceably linked. Why email, Teams, and drives are often insufficient for this purpose.

July 10, 2026

Article by Marcus Belke

A Record of Processing Activities in Excel? What Article 30 of the GDPR Actually Requires

Many companies maintain their record of processing activities (RPA) in Excel. This works fine on a day-to-day basis—until the RPA is audited. We explain why Article 30 of the GDPR

May 5, 2026

Article by Aristotelis Zervos

Transcription and Speaker Identification: Data Protection Challenges Posed by Modern Meeting Technologies

Modern transcription systems not only convert speech into text, but also attempt to identify individual speakers. As a result, they are not only directly subject to the requirements of the

April 17, 2026

A RoPA can be a real efficiency driver - with a measurable ROI.

Article by Marcus Belke

RoPA pays off! How the processing directory generates a real ROI

A record of processing activities (VVT/RoPA) can become a tangible economic factor - if it is used correctly. How a legal regulatory obligation can be turned into a measurable return on investment.

October 14, 2025

The EGC has confirmed the EU-US Data Privacy Framework.

Article by Aristotelis Zervos

EGC confirms EU-US Data Privacy Framework: What companies must now consider

The European Court of Justice has dismissed the action against the adequacy decision between the EU and the US, thus confirming the validity of the EU-US Data Privacy Framework

September 4, 2025

Shared responsibility for social media fan page

Article by Aristotelis Zervos

Joint responsibility for social media fan page: VG Cologne puts the brakes on BfDI

The Cologne Administrative Court has allowed the Federal Press Office to continue operating the Facebook fan page for the German government. The subject of the proceedings was in particular the question of whether the operation of a

August 25, 2025

Perform threshold value analysis in 5 steps

Article by Aristotelis Zervos

What is a GDPR threshold analysis and when is it mandatory?

When should a threshold value analysis be carried out, how does it work and how can it be reliably assessed whether there is an "expected high risk"? This article provides practical answers

July 9, 2025

Schufa must delete negative entries promptly after a payment.

Data protection in Germany

Schufa ruling: Negative entries must be deleted promptly after payment

Will Schufa's long retention periods soon be history? The Cologne Higher Regional Court considers it a violation of the GDPR if a credit agency makes negative entries after liabilities have been settled.

April 29, 2025

The GDPR also plays an important role in the association.

Data protection in Germany

Data protection in the association - requirements and implementation according to the GDPR

As controllers within the meaning of Art. 4 No. 7 GDPR, associations are obliged to fulfill all data protection requirements and to demonstrate compliance with them. The implementation represents

April 15, 2025

Compliance

Carry out Transfer Impact Assessment (TIA) safely with CNIL guidelines

The French data protection authority CNIL has developed a practical guide for carrying out Transfer Impact Assessments (TIA). This procedure enables companies to assess the level of data protection in the recipient country.

March 5, 2025

You can also follow us on our social media channels:

Phone: +1 (954) 852-1633

Mail: info@2b-advice.com

Subscribe to our newsletter

Click here, to subscribe to our newsletter on data protection and be the first to be informed about the latest developments.