RoPA – the centrepiece of data protection, but what needs to be done?
The records of processing activities (RoPA) are an essential component of the General Data Protection Regulation (GDPR). It is the centrepiece of the data protection management system (DSMS). It serves as proof of the legally compliant implementation of the data [...]
Data Protection – Regulation on Artificial Intelligence (AI Act) enters into force
The use of AI offers companies numerous opportunities and possibilities for process optimisation and the development of new business models. However, its use also brings with it legal and ethical requirements, particularly in the area of data protection. The "Regulation on [...]
Data protection supervisory authority clears up data protection misconceptions
The Thuringian State Commissioner for Data Protection and Freedom of Information (TLfDI) has used Safer Internet Day 2024 to clarify persistent data protection misconceptions. Here are a few misconceptions: Data protection wants to prevent digitalisation No. Digitalisation, but legally compliant [...]
Navigating Data Protection Challenges under HinSchG: A Closer Look
Exploring Legal Obligations, Confidentiality, and Impact Assessment. Data Protection in the Context of the Hinweisgeberschutzgesetz (HinSchG) When highly sensitive data is being collected, it's crucial to determine who can access it. Data subjects have a right to access, but does this [...]