According to the ECJ, an initial request for information can also be „excessive“ within the meaning of Art. 12 (5) GDPR if the controller proves that the request is not
Data breaches are now one of the most common compliance incidents in organizations. Incidents have to be assessed, reporting obligations checked, measures documented and communication decisions made within a short space of time. We provide
Good audit preparation requires clear responsibilities, structured evidence and transparent processes. Find out how auditors think, what weaknesses frequently occur in data protection audits and how you can
A recent ruling by the Federal Court of Justice (BGH) provides clarity regarding non-material damages pursuant to Art. 82 GDPR in the event of a data leak at a former processor.
The European Data Protection Board's coordinated enforcement action 2026 focuses on the transparency and information obligations under Articles 12, 13, and 14 of the GDPR. What this means in concrete terms for
On June 27, 2025, the Council of the European Union adopted a draft regulation laying down additional procedural rules for the enforcement of the GDPR in cross-border cases.
On June 16, 2025, the Conference of Independent Federal and State Data Protection Supervisory Authorities (DSK) adopted the Model Guidelines for the Procedure on Fines (MRiDaVG).
The automotive group has appealed against both a fine of 4.3 million euros and several warnings from the State Commissioner for Data Protection of Lower Saxony (LfD).
The 290-million fine imposed on the ride-hailing company Uber is not the only thing that stands out in August. Why the negligent mistake of a single employee can be expensive for a company,
The top 5 GDPR fines list for the month of July shows that serious breaches of the GDPR are being prosecuted and penalized across Europe. This is what the well-known second-hand portal Vinted