Data protection for businesses – obligations & practical guidelines

Ailance

Ailance RoPA: Multi-tab workflow for faster work

Anyone who regularly works with Ailance RoPA is familiar with this: you are constantly switching back and forth between processing activities, parties involved and data protection impact assessments (DPIAs). The focus and

31.10.2025

Third-Party Risk Management (TPRM) is a central element of modern corporate management in order to comply with legal requirements.

Article by Aristotelis Zervos

Third-party risk management: How to keep service providers under control

Third-party risk management (TPRM) is a central element of modern corporate management. It creates the basis for complying with legal requirements, reducing liability risks and gaining the trust of third parties.

08.08.2025

In the event of continued illness, the obligation to continue to pay wages does not apply if the new illness is related to the previous one.

Article by Marcus Belke

Health data in the event of continued illness as a data protection challenge

The data protection assessment of health data in the employment relationship is one of the most sensitive aspects of compliance practice. A current occasion for in-depth discussion is the publication of the

07.08.2025

The popular video editing app CapCut from ByteDance, which also owns TikTok, updated its terms of use on June 12, 2025.

Compliance

CapCut trouble over new "Terms of Service": legal risks lurk here

The popular video editing app CapCut from ByteDance, which also owns TikTok, updated its terms of use on June 12, 2025. These now provide for a comprehensive

04.07.2025

The DSK has published a new model guideline for uniform standards for data protection fine proceedings (MRiDaVG).

Data protection in Germany

Uniform standards for data protection fine proceedings: the new DSK model guidelines (MRiDaVG)

On June 16, 2025, the Conference of Independent Federal and State Data Protection Supervisory Authorities (DSK) adopted the Model Guidelines for the Procedure on Fines (MRiDaVG).

26.06.2025

Legitimate interests in the development of AI systems: The French data protection supervisory authority CNIL has published guidance on this.

Data protection in Europe

Legitimate interest in the development of AI systems: CNIL guidance

In June 2025, the French data protection supervisory authority CNIL published guidance on the application of the "legitimate interest" (Art. 6 para. 1 lit. f GDPR) as a

25.06.2025

Integrated Risk Management (IRM) no longer looks at risks in isolation, but systematically networks them.

Ailance

Integrated risk management in practice: combining data protection, compliance and security

While compliance issues have often been dealt with in silos in the past, the reality is that data protection, information security, business continuity and legal obligations are closely linked.

10.04.2025

The French competition authority Autorité de la concurrence imposes a fine of 150 million euros on Apple.

Compliance

150 million euro fine against Apple: ATT data protection function as a competitive advantage

The French competition authority (Autorité de la concurrence) sentenced Apple to a fine of 150 million euros on March 31, 2025. The reason is the abuse

09.04.2025

Data protection

The five highest fines in June 2024

In June, the data protection authorities in Spain and Italy were particularly active and issued large fines. The highest fine was imposed on an energy company - for

28.06.2024

Data protection

6 years of GDPR: What the data protection rules have brought

The General Data Protection Regulation (GDPR) has been in force since 25.05.2018. For the first time, it regulates how companies are allowed to handle personal data in a uniform manner across Europe. How consumers and companies can benefit after six

24.05.2024

Article & News

Tag: Datenschutz