From retention periods to erasure requests: deletion concepts that actually work

Writing a deletion policy is one thing. Ensuring that personal data is actually removed from the systems in a timely manner is
DATENSCHUTZ FÜR DIGITALE PRODUKTE UND UNTERNEHMEN

Writing a deletion policy is one thing. Ensuring that personal data is actually removed from the systems in a timely manner is

AI has become virtually indispensable in business processes. But where exactly does the AI run that processes your customer data, internal documents,
In June 2025, the Data (Use and Access) Act (DUAA) received Royal Assent. The DUAA introduced several amendments to existing data protection

The new EU Data Act has been of increasing concern for our clients that are active in the SaaS and connected products industries since

Opportunities for the transfer of pseudonymous online marketing data – the role of data clean rooms – how businesses can ensure their

Corporate data protection is complex. Between documenting data flows, managing intra-group transfers, and implementing TOMs, companies often lack a clear and practical

Cross-border data transfers between the EU and China remain a complex and challenging issue. In practice, businesses often find themselves in a
What is a Penetration Test? A penetration test is a simulated cyber attack on a computer system, network or web application that is carried
Since February, the first stage of the AI Act has come into effect, introducing two requirements: AI systems with unacceptable risks are

The AI Act came into force on 2 August 2024. The first requirements must be implemented as early as February 2025. In