AI & Innovation

Ihr ISO 27001-Audit steht bevor, die NIS2-Umsetzung ist beschlossen, Ihr VVT ist auf dem aktuellen Stand – und jetzt das: Mit dem „Digitalen Omnibus“ hat die EU-Kommission ein Gesetzespaket vorgelegt, das zentrale Säulen des Datenschutz- und Compliance-Managements von KMU verändern könnte und auch KI-Regeln betrifft.

As the use of artificial intelligence (AI) in businesses increases, so does the need for clear legal rules. Since August 2024, the European Union's AI Act has provided a legal framework for the regulated and secure use of AI systems in the EU. The AI Regulation (AI-VO) came into force on August 1, 2024 – with staggered transitional periods until 2027. In this article, you will learn about the specific requirements your company will face and how to minimize compliance risks.

As an autonomous AI agent, OpenClaw promises efficiency and relief in everyday work. In practice, however, this primarily creates new risks for information security and data protection. Because in order to carry out tasks independently, the agent needs extensive access rights. We will clarify whether it is currently advisable to use OpenClaw in the company.

Companies that use Artificial Intelligence (AI) need effective AI governance. AI usage policies play a central role: they clearly show employees the benefits and limitations of the technology and how to work safely with AI. Our guide provides tips on how to create your own AI Policy.

The use of AI tools is a massive trend in the workplace – but with innovation comes responsibility: data protection and GDPR compliance must be a top priority for companies using artificial intelligence. Those who deploy AI solutions like ChatGPT, Copilot, or Google Gemini need to understand how these systems handle personal and sensitive data. The central question is: Which of these AI tools meets European data protection requirements – and where do risks lurk? In the following overview, you will learn how ChatGPT, Microsoft Copilot, and Google Gemini fare regarding GDPR. We will also examine key topics such as data minimization, transparency, controllability, risk assessment, and accountability – and present DeepSeek as a negative example of GDPR violations.

The EU has set the guardrails for the safe use of AI. However, companies should not rely solely on the AI Act but implement their own policies. Learn why AI governance is important and what role data protection plays in it.

ChatGPT is sparking global curiosity about Artificial Intelligence. Around 500 million people interact with the chatbot weekly. But with the hype, concerns from data protection experts are also growing. How secure is ChatGPT regarding data protection, and do companies have to forgo the AI tool?

it-sa 2025 in Nuremberg impressively demonstrated: Information security is no longer a theoretical exercise – it's a business-critical reality for German SMEs. Amidst crowded exhibition aisles and intense discussions, a clear picture emerged: companies are not looking for the perfect solution, but for pragmatic answers to urgent compliance questions. From NIS2 and digital sovereignty to AI governance – regulatory requirements are growing rapidly, while internal resources remain limited. This report summarizes the key findings of our panel discussion "Risk Exposure – What Does AI Really Change?" and provides concrete recommendations for SMEs.

About half a year ago, the European Parliament and the European Council agreed on the proposal for the "EU AI Act". This is the world's first legislation to intensively address the regulation of Artificial Intelligence (AI).

Artificial intelligence and machine learning allow us to age, look younger, or appear in videos we never knew existed. This is all known as deepfaking. But what does this mean for data protection?

What will I look like when I’m old? Should I get preventative fillers for any potential wrinkles? To answer these questions, FaceApp helps with digital aging. However, what the app does with the data provided and the state of FaceApp’s data privacy is alarming.