German data protection authority: Newsletter opt-in can be made a prerequisite for free prize draws
The issue of “newsletter opt-ins” is often on our clients’ agenda – because the legal requirements regularly become a challenge for their
High fines for data protection breaches
Where do the authorities currently focus their audits? What should you look for if you want to avoid fines? Much can be
News about ePrivacy: Current status of our accredited data protection seals
We have alredy reportet that we will soon be offering our clients state-approved data protection certificates and seals via the ePrivacycert GmbH.
International data transfers: German supervisory authorities announce audits following “Schrems II”
Following the judgment of the European Court of Justice in the “Schrems II” matter in July 2020, it was clear that the
What will the new German TTDSG law change for the online marketing sector? (hint: nothing, at least for now!)
A new law merging the German Telecommunications Act (TKG) as well as the German Telemedia Act (TMG) had been on the table
New Standard Contractual Clauses adopted: What do I need to do now?
On 4 June, the European Commission adopted a new version of the Standard Contractual Clauses. The adaptation of the “SCCs” had already been on
Consent management – is it okay to “nudge” users?
What happened?We have recently come across legal complaints concerning Consent Management Platforms (CMPs) which may also be of interest to our customers.
ISO/IEC 27001 certifications – how can they be obtained?
ePrivacy advises businesses and public authorities on setting up and introducing information security management systems (ISMS). Information security management systems preserve the confidentiality,
ePrivacycert – our accredited data protection certification
With ePrivacycert GmbH we will soon be offering an officially recognised data protection seal to our customers. The “ePrivacycert” data protection seal is currently
Attack on the “Microsoft Exchange” mail server service
Earlier this year, there was an attack on the mail server service “Microsoft Exchange”. According to information from Microsoft, the Chinese state-affiliated group