European Union: Data Protection

The recent trend in regulating the European Union's digital framework seems to revolve around the principle of accountability.

The EU Data Act (Regulation (EU) 2023/2854), applicable as of Sept. 12, 2025, introduces a user‑centric access and sharing regime for both personal and non-personal data generated by IoT (Internet of Things) products, with a profound impact on how "data holders" design products, structure contracts, and monetize data.

Dies stellt einen Paradigmenwechsel im EU-Datenrecht dar, mit weitreichenden Folgen für alle Wirtschaftssektoren.

When conducting an initial check on who owns a domain name, a WhoIs query has long been the standard procedure.

The definition of "personal data1" is fundamental to data protection law, but its scope remains a frequent source of confusion. While the GDPR clearly applies to personal data and excludes anonymous information...

The regulatory landscape remains highly dynamic: In this issue, we provide a concise overview of current developments in IT law and data protection...

Ergani ΙΙ and the brand-new "Quick Hire" app are helping the Greek employers enter a new chapter in workforce management in Greece. Main goal of these reforms is to simplify urgent short-term hiring, reduce bureaucracy...

The case centered on the definition of "personal data" in the context of pseudonymized information and the transparency obligations of data controllers under EU data protection law.

In der digitalisierten Wirtschaft stellen Daten und Geschäftsprozesse eine wesentliche Grundlage der Wertschöpfung dar. Zunehmende Auslagerungen zentraler Funktionen – etwa Finanz-buchhaltung, Lohn- und Gehaltsabrechnung, Zahlungsabwicklung, IT-Hosting, Rechen-zentrumsbetrieb und Cloud-Services – erhöhen das Risikoprofil von Organisationen.