Sensitive data when ordering medicines online – the GDPR does not bar competition lawsuits
It follows from a decision also handed down on 4 October 2020 (Case C-21/23) that, in the opinion of the European Court
Principle of data minimisation in online marketing – permissibility of processing personal data which are manifestly made public by the data subject under Art. 9 GDPR
On 4 October 2024, the European Court of Justice (ECJ) issued another decision in the dispute between Max Schrems and Meta in case
The existence of the balancing of interests clause is to be examined in three stages – Art. 6 (1) (c) GDPR does not require a legislative basis
In a somewhat special case, the European Court of Justice (ECJ) had to examine whether the receipt or disclosure of contact data
No obligation for a data protection supervisory authority to take remedial action in the event of a breach of the protection of personal data
The case underlying a request for a preliminary ruling from the European Court of Justice (ECJ) was that an employee of a
Keine Verpflichtung einer Datenschutzaufsichtsbehörde im Falle einer Verletzung des Schutzes personenbezogener Daten Abhilfemaßnahmen zu ergreifen
Einem Vorabentscheidungsersuchen an den Europäischen Gerichtshof (EuGH) lag der Fall zugrunde, dass eine Mitarbeiterin eines Kreditinstitutes mehrfach unbefugt auf Daten eines Kunden
Practical tip: What to do after consent has been withdrawn?
Outside of image recordings, consent can usually be withdrawn at any time without any problems. The withdrawal of consent does not affect
Revocation of consent for image recordings
When it comes to consent under privacy law, the requirements seem clear. Art. 4 No. 11 and Art. 7 GDPR together with
Data protection certificates according to the GDPR vs. “free” data protection seals – overview and possible applications
Our CEO and Founder, Prof. Bauer, has written an article in the trade journal “Datenschutzberater” about data protection certificates. In the article, Prof. Bauer shares
Termination without notice after data protection breach
In practice, many employees are often tempted to forward internal company information to a private email address. In some cases, such forwarding
AI Act and data protection with AI
The AI Act came into force on 2 August 2024. The first requirements must be implemented as early as February 2025. In