Sabrina Schaub

The NIS2 Implementation Act has been in force since December 6, 2025. From now on, compliance officers must report significant security incidents within 24 hours. This guide shows you what other deadlines apply and how to safely meet them in an emergency.

A GDPR data protection audit offers small and medium-sized enterprises (SMEs) the opportunity to voluntarily have their data protection compliance reviewed and to demonstrate it externally through a certificate. Find out what to expect during preparation and the audit process.

Data security and data protection are not synonyms, but two important tasks for companies. Learn how to clearly distinguish between both areas and implement them efficiently.

A Data Protection Officer ensures that companies securely meet GDPR requirements and protects against data breaches. But what if incidents still occur, or the supervisory authority suddenly imposes fines? This article shows which mistakes you should avoid when working with Data Protection Officers.

Companies that use Artificial Intelligence (AI) need effective AI governance. AI usage policies play a central role: they clearly show employees the benefits and limitations of the technology and how to work safely with AI. Our guide provides tips on how to create your own AI Policy.

Storing personal data – but for how long? This question arises daily in companies: On the one hand, the GDPR requires data to be deleted as soon as the processing purpose ceases. On the other hand, there are statutory retention obligations and periods from the German Commercial Code (HGB), Tax Code (AO), or Income Tax Act (EStG) that mandate longer storage. This guide shows you how to meet both requirements, avoid fines, and maintain an overview.

NIS2 requires supply chain security, GDPR demands transparent data processing, and DORA targets ICT security in the financial sector. Those who don't fully control their IT systems and data will struggle to meet these regulations. Digital sovereignty is therefore no longer a nice-to-have, but a prerequisite for demonstrable compliance.

In a world where cyberattacks are becoming increasingly frequent and sophisticated, information security and data protection are essential for organizations. The international standard ISO 27001 helps organizations reduce cyber risks using the ISO 27001 Controls from Annex A. Learn everything about the ISO 27001 Controls and how to successfully implement these measures.

Even today, executives are obliged to ensure IT security. However, with the new NIS2 directive, it becomes clear: responsibility unequivocally lies with management. Anyone who ignores obligations, fails to monitor measures, or foregoes training may be held personally liable. The NIS2 implementation act has been in force in Germany since December 6, 2025 – without a transition period. Learn everything about NIS2 liability in this article and why IT security is a top management priority.

Für den sicheren Umgang mit KI hat die EU die Leitplanken gesetzt. Unternehmen sollten sich jedoch nicht allein auf die KI-Verordnung verlassen, sondern eigene Richtlinien nutzen. Erfahren Sie, warum KI-Governance wichtig ist und welche Rolle der Datenschutz dabei spielt.

ChatGPT is sparking global curiosity about Artificial Intelligence. Around 500 million people interact with the chatbot weekly. But with the hype, concerns from data protection experts are also growing. How secure is ChatGPT regarding data protection, and do companies have to forgo the AI tool?

With an ISO risk assessment, IT and InfoSec managers lay the groundwork for an effective ISMS that protects their company from cyberattacks and data loss and helps meet GDPR and NIS2 requirements. In this practical guide, you will learn everything about ISO risk analysis and the role Annex A and the SoA play.

When it comes to the security of IT systems and data, ISO 27001 and TISAX® are often mentioned. These are certifications that demonstrate your company takes cybersecurity and data protection seriously. We explain the basics of both standards and show you which one is truly relevant for your company.

Vor rund einem halben Jahr haben sich das Europäische Parlament und der Europäische Rat auf den Vorschlag zur "EU KI-Gesetzgebung" geeinigt. Dabei handelt es sich um die weltweit erste Gesetzgebung, die sich intensiv mit der Regulierung von Künstlicher Intelligenz (KI) beschäftigt.

The General Data Protection Regulation stipulates that individuals affected by data protection violations may have a right to damages. The European Court of Justice recently issued relevant rulings on this.