DSGVO Archives - Ailance

Article by Marcus Belke

Enterprise GRC in Data Protection: Why This Approach Often Fails

Enterprise GRC systems have long been considered the standard for governance, risk, and compliance in large organizations. In practice, however, a conflict is increasingly coming to light: particularly in the

22.04.2026

Why a record of processing activities (RoPA) is a strategic advantage for every company.

Article by Marcus Belke

The record of processing activities (RoPA): more than just a GDPR obligation

How to turn a record of processing activities into a tool that provides your company with transparency, reduces risks and reveals optimization potential.

14.04.2026

ECJ on misuse of requests for information

Data protection in Europe

When is a request for information excessive? ECJ names specific test points

According to the ECJ, an initial request for information can also be „excessive“ within the meaning of Art. 12 (5) GDPR if the controller proves that the request is not

19.03.2026

Reporting process in the event of a data breach

Article by Marcus Belke

Report a data breach correctly: Reporting process according to GDPR with deadlines, evaluation and documentation

Data breaches are now one of the most common compliance incidents in organizations. Incidents have to be assessed, reporting obligations checked, measures documented and communication decisions made within a short space of time. We provide

17.03.2026

Google becomes the processor for reCAPTCHA.

Compliance

reCAPTCHA and GDPR: Google becomes a processor - what website operators need to know now

Google will reclassify its role in the use of reCAPTCHA under data protection law and will no longer act as a controller but as a processor from April 2026. What this means

12.03.2026

The internal data protection officer has special protection against dismissal

Article by Marcus Belke

Special protection against dismissal for the internal data protection officer

In Germany, the internal data protection officer enjoys far-reaching special protection against dismissal. Anyone who appoints an employee as data protection officer is therefore making a decision with long-term consequences. What this means for

10.03.2026

In the event of a data leak at the processor, the controller is liable.

Article by Aristotelis Zervos

Failure to monitor processors: BGH extends liability of the controller

A recent ruling by the Federal Court of Justice (BGH) provides clarity regarding non-material damages pursuant to Art. 82 GDPR in the event of a data leak at a former processor.

14.01.2026

How companies can use proctoring in a legally compliant manner.

Article by Aristotelis Zervos

Proctoring in the application process: Admissibility under data protection law according to the GDPR

Is proctoring in the application process compliant with data protection regulations? Find out which GDPR requirements apply and how companies can use proctoring in a legally compliant manner.

18.12.2025

Article by Aristotelis Zervos

ECJ: Newsletters possible without consent – these are the conditions

In its judgment C‑654/23, the European Court of Justice (ECJ) provides clear guidelines on the interpretation of the term „direct marketing“ within the meaning of the ePrivacy Directive and on the relationship between the

21.11.2025

Article by Aristotelis Zervos

Data protection authorities review AI use: companies must answer these 7 questions now

A few companies are currently receiving letters from data protection supervisory authorities regarding the use of AI tools. The supervisory authorities apparently want to obtain an up-to-date overview of the use of artificial intelligence in companies.

19.11.2025

Article & News

Tag: DSGVO