GDPR consent – requirements, revocation, and proof

Article by Marcus Belke

Getting data protection out of the email trap

In many companies, data protection seems to function smoothly. However, a closer look reveals that the majority of these processes are organized via email. Precisely

April 1, 2026

Data protection in Germany

Proof of effective consent for direct marketing

The requirements for proof of effective consent for direct marketing are increasingly becoming the focus of data protection supervisory authorities. What is important now and what requirements you

March 31, 2026

2B Advice News

Using VVT as a control instrument for management

The processing directory (VVT) acts as a database and supports decision-making processes. This article shows how companies can move away from a purely documentation-based perspective and integrate the VVT into a

March 24, 2026

Reporting process in the event of a data breach

Article by Marcus Belke

Report a data breach correctly: Reporting process according to GDPR with deadlines, evaluation and documentation

Data breaches are now one of the most common compliance incidents in organizations. Incidents have to be assessed, reporting obligations checked, measures documented and communication decisions made within a short space of time. We provide

March 17, 2026

Google becomes the processor for reCAPTCHA.

Compliance

reCAPTCHA and GDPR: Google becomes a processor - what website operators need to know now

Google will reclassify its role in the use of reCAPTCHA under data protection law and will no longer act as a controller but as a processor from April 2026. What this means

March 12, 2026

How companies can use proctoring in a legally compliant manner.

Article by Aristotelis Zervos

Proctoring in the application process: Admissibility under data protection law according to the GDPR

Is proctoring in the application process compliant with data protection regulations? Find out which GDPR requirements apply and how companies can use proctoring in a legally compliant manner.

December 18, 2025

Article by Aristotelis Zervos

ECJ: Newsletters possible without consent – these are the conditions

In its judgment C‑654/23, the European Court of Justice (ECJ) provides clear guidelines on the interpretation of the term „direct marketing“ within the meaning of the ePrivacy Directive and on the relationship between the

November 21, 2025

Article by Aristotelis Zervos

GDPR reform: These are the planned changes to cookie banners

As part of the „Digital Omnibus“, the EU Commission is planning a far-reaching reform of the General Data Protection Regulation, which particularly affects the rules for online tracking and cookie banners. We present the

November 13, 2025

Article by Aristotelis Zervos

Ruling on "Pay or Okay" models: Genuine freedom of choice is mandatory

Cookie banners have long been part of everyday life, but their legal admissibility remains controversial. The question of whether so-called "pay or okay" models are compatible with the GDPR is particularly controversial.

August 19, 2025

In the event of continued illness, the obligation to continue to pay wages does not apply if the new illness is related to the previous one.

Article by Marcus Belke

Health data in the event of continued illness as a data protection challenge

The data protection assessment of health data in the employment relationship is one of the most sensitive aspects of compliance practice. A current occasion for in-depth discussion is the publication of the

August 7, 2025

Article & News

Tag: Einwilligung