Sabrina Schaub

The GDPR strengthens the right to erasure and the right to be forgotten for consumers in the EU: companies and search engine providers must delete personal data under certain conditions. Find out what these are and how to fulfill your obligations.

There are many NIS2 software solutions that can support companies in implementing the requirements. Generally, they all claim to be "NIS2 ready." For SMEs, it is more important to consider who the solution was built for, how complex the implementation is, and what happens when additional requirements are added to NIS2. This comparison provides guidance for choosing the right provider.

Does your company use Microsoft 365, Google Workspace, Salesforce, or AWS? If so, you are transferring personal data to the United States. Transatlantic data transfers were previously legally secure, but a US Supreme Court ruling in June 2026 has shaken this foundation. Almost every organization in Europe is affected.

Ihr ISO 27001-Audit steht bevor, die NIS2-Umsetzung ist beschlossen, Ihr VVT ist auf dem aktuellen Stand – und jetzt das: Mit dem „Digitalen Omnibus“ hat die EU-Kommission ein Gesetzespaket vorgelegt, das zentrale Säulen des Datenschutz- und Compliance-Managements von KMU verändern könnte und auch KI-Regeln betrifft.

German companies are looking to become more digitally independent from non-European cloud providers. To help them evaluate and compare the sovereignty of cloud services, the EU has established uniform standards through the SEAL framework. How practical is this rating scale for businesses, and what steps should be taken now?

An Information Security Management System (ISMS) allows you to systematically protect your organization's internal and external information from unauthorized access. This overview summarizes the key facts about ISMS and best practices for its implementation.

A robust Information Security Management System (ISMS) forms the backbone of an effective corporate security strategy. Learn how to implement such a system in your company to keep hackers at bay.

Managing all requirements and documentation across GDPR, NIS2, and AI compliance is a particular challenge, especially for SMEs. Many companies still manage their compliance data and tasks manually in spreadsheets. In day-to-day operations, it's easy to quickly lose track of time and a clear overview. A GRC platform eases the burden, but is it the right solution for SMEs?

The NIS2 Implementation Act has been in force since December 6, 2025. From now on, compliance officers must report significant security incidents within 24 hours. This guide shows you what other deadlines apply and how to safely meet them in an emergency.

A GDPR data protection audit offers small and medium-sized enterprises (SMEs) the opportunity to voluntarily have their data protection compliance reviewed and to demonstrate it externally through a certificate. Find out what to expect during preparation and the audit process.

The GDPR is based on a simple principle: the higher the risk to the individuals involved, the more extensive the protective measures must be. Risk analysis is therefore the foundation for almost all data protection decisions within a company—from selecting technical measures and reporting data breaches to determining whether a data protection impact assessment is required. This article explains how it works in practice.

As an autonomous AI agent, OpenClaw promises efficiency and relief in everyday work. In practice, however, this primarily creates new risks for information security and data protection. Because in order to carry out tasks independently, the agent needs extensive access rights. We will clarify whether it is currently advisable to use OpenClaw in the company.

If external service providers process personal data on behalf of your company, the GDPR requires you to enter into a contract with them that sets out the terms and conditions for this processing. Learn what a data processing agreement (DPA) entails and why it is essential for your business.

Data security and data protection are not synonyms, but two important tasks for companies. Learn how to clearly distinguish between both areas and implement them efficiently.

In large companies and corporations in particular, data protection can quickly become complex. The GDPR allows organizations to appoint a group data protection officer to ensure consistent data protection standards across the entire group.

A Data Protection Officer ensures that companies securely meet GDPR requirements and protects against data breaches. But what if incidents still occur, or the supervisory authority suddenly imposes fines? This article shows which mistakes you should avoid when working with Data Protection Officers.

Are you looking to appoint a data protection officer for your company and wondering if your candidate truly possesses the specialized knowledge, IT expertise, and experience your business requires? Discover which qualifications are essential for a DPO’s responsibilities, when a legal expert is a better fit than an IT specialist, and what it takes to ensure your data protection is not only compliant but also efficient.

What is a GDPR data protection officer, and how do internal data protection experts differ from other roles? This article provides clarity.

Companies that use Artificial Intelligence (AI) need effective AI governance. AI usage policies play a central role: they clearly show employees the benefits and limitations of the technology and how to work safely with AI. Our guide provides tips on how to create your own AI Policy.

Data protection officers aren't just found in private companies. At the state and federal level, there are also federal and state data protection commissioners. Find out why your data protection officer should be familiar with these authorities.

Storing personal data – but for how long? This question arises daily in companies: On the one hand, the GDPR requires data to be deleted as soon as the processing purpose ceases. On the other hand, there are statutory retention obligations and periods from the German Commercial Code (HGB), Tax Code (AO), or Income Tax Act (EStG) that mandate longer storage. This guide shows you how to meet both requirements, avoid fines, and maintain an overview.

Internal data protection officers benefit from special protection against dismissal, which presents many employers with legal challenges. This article explains when termination is possible, how it differs from removal from office, and what alternatives are available.

NIS2 requires supply chain security, GDPR demands transparent data processing, and DORA targets ICT security in the financial sector. Those who don't fully control their IT systems and data will struggle to meet these regulations. Digital sovereignty is therefore no longer a nice-to-have, but a prerequisite for demonstrable compliance.

Hybrid attacks, political tensions, and sabotage demonstrate: Germany is in the midst of a permanent cyber conflict – and SMEs are part of the attack surface. Companies that are not resilient could inadvertently become entangled in geopolitical conflicts.

In a world where cyberattacks are becoming increasingly frequent and sophisticated, information security and data protection are essential for organizations. The international standard ISO 27001 helps organizations reduce cyber risks using the ISO 27001 Controls from Annex A. Learn everything about the ISO 27001 Controls and how to successfully implement these measures.

Even today, executives are obliged to ensure IT security. However, with the new NIS2 directive, it becomes clear: responsibility unequivocally lies with management. Anyone who ignores obligations, fails to monitor measures, or foregoes training may be held personally liable. The NIS2 implementation act has been in force in Germany since December 6, 2025 – without a transition period. Learn everything about NIS2 liability in this article and why IT security is a top management priority.

NIS2 brings comprehensive cybersecurity requirements for companies. The following article outlines the obligations that affected organizations must meet as of December 6, 2025, and how your organization can efficiently master the EU's NIS2 requirements.

The EU has set the guardrails for the safe use of AI. However, companies should not rely solely on the AI Act but implement their own policies. Learn why AI governance is important and what role data protection plays in it.

ChatGPT is sparking global curiosity about Artificial Intelligence. Around 500 million people interact with the chatbot weekly. But with the hype, concerns from data protection experts are also growing. How secure is ChatGPT regarding data protection, and do companies have to forgo the AI tool?

Digitalization is bringing companies, customers, and service providers closer together. An increasing number of IT applications and data are migrating to the cloud. While this drives efficiency, it also introduces risks to data and systems. The Zero Trust principle is designed to mitigate these cyber risks.

With an ISO risk assessment, IT and InfoSec managers lay the groundwork for an effective ISMS that protects their company from cyberattacks and data loss and helps meet GDPR and NIS2 requirements. In this practical guide, you will learn everything about ISO risk analysis and the role Annex A and the SoA play.

Anyone responsible for accounting within a company handles sensitive financial data on a daily basis. This makes data protection in accounting indispensable for any business. Learn how to keep your financial data GDPR-compliant, even as you increasingly digitize your accounting processes.

A cyberattack can cripple a business for the long term, affecting corporations and SMEs alike. Cyber resilience helps to limit damage and ensure business continuity. Learn how to build greater cyber resilience for your company.

When it comes to the security of IT systems and data, ISO 27001 and TISAX® are often mentioned. These are certifications that demonstrate your company takes cybersecurity and data protection seriously. We explain the basics of both standards and show you which one is truly relevant for your company.

Information security is relevant across all industries, and the automotive sector even has its own certification for companies that implement specific measures to protect information. This article breaks down the costs of this hallmark of cybersecurity.

IT companies are facing major challenges: cyber threats are growing, yet they cannot afford to fall behind in the digitalization race. Here is how data protection helps balance IT security with progress.

About half a year ago, the European Parliament and the European Council agreed on the proposal for the "EU AI Act". This is the world's first legislation to intensively address the regulation of Artificial Intelligence (AI).

The General Data Protection Regulation stipulates that individuals affected by data protection violations may have a right to damages. The European Court of Justice recently issued relevant rulings on this.

The BSI status report provides regular updates on the state of IT security in Germany. The latest report presents alarming findings. We have summarized the 5 most important takeaways and show you how to protect your company.

To improve processes, supply chains, or carbon footprints, companies need to collect data—but it only becomes truly efficient when that data is shared. What are the benefits and the hurdles? And what roles do platforms, the Data Act, and data protection officers play in this process?

Website operators must obtain user consent for storing and processing data when using Google Ads or Google Analytics. Since March 2024, the use of Google Consent Mode has been mandatory for them. We provide information on what this means for you in practice.

The European Union is currently working on a digital identity wallet. This will allow EU citizens to identify themselves more easily online and store important documents, such as ID cards or driver's licenses, in a digital format. The digital wallet will also be relevant for businesses. However, data protection advocates see more than just benefits in this development.

Whether you are already using the Meta Pixel or are just planning to implement it, here you will find everything you need to know about the data protection requirements and how to use the Meta Pixel in a way that is as GDPR-compliant as possible.