Vasiliki Paschou | activeMind.legal

CJEU ruling on compensation following a hacker attack

Nicole Kopp 3 July 2025

The CJEU rules on the conditions under which data subjects affected by a data protection breach or hacker attack can claim damages.

The compliance standard ISO 37301

Olivia Josovic 2 July 2025

What does the ISO 37301 standard require from organisations, and how does a compliance management system help ensure adherence to laws, contracts, and codes of conduct?

The German Accessibility Improvement Act (BFSG)

David Weihbrecht 28 June 2025

Who is affected by the BFSG? What are the accessibility requirements for digital products and services? An overview!

The German Regulation on the Accessibility Improvement Act (BFSGV)

David Weihbrecht 28 June 2025

What are the accessibility requirements under the German BFSGV – and how can you meet them? An overview!

The Digital Services Act (DSA)

Alessandra Manzoni 22 June 2025

What does the DSA say and what does the regulation mean for companies in the EU?

European Health Data Space and the EHDS Regulation

Nicole Kopp 2 June 2025

What is the European Health Data Space (EHDS) aiming to achieve, what will medical institutions need to prepare for, and how can companies in the healthcare sector get ready for the EHDS regulation?

GDPR reform: relief or erosion?

Jure Globocnik 27 May 2025

The European Commission wants to simplify the rules of the General Data Protection Regulation (GDPR) for companies with fewer than 750 employees. However, the proposal raises some fundamental questions.

Is Art. 9 GDPR an independent legal basis?

David Weihbrecht 21 May 2025

What is the relationship between Art. 6(1) GDPR and Art. 9(2) GDPR – and is it sufficient to fulfil the latter in order to be allowed to process special categories of personal data?

Can a verbal disclosure constitute processing within the meaning of the GDPR?

Martin Röleke 6 May 2025

The CJEU rules on the concept of processing and the objectives of the GDPR.

Reach measurement with or without consent?

Michael Plankemann 28 April 2025

Current EDPB guidelines require consent for reach measurement using IP collection, which the German Data Protection Conference (DSK) contradicts (at least indirectly). What should companies do now?

Group Data Protection

AI Compliance

Whistleblower System

Special topics

Our Experts

Guides and Articles

Munich

Berlin

Services

Resources

About

Group

Contact us!

Secure the knowledge of our experts!