
Consolidating Data Protection Oversight at the BfDI: What Companies Need to Know
Data protection oversight is to be consolidated under the BfDI—here’s what the reform would mean for businesses.

Data protection oversight is to be consolidated under the BfDI—here’s what the reform would mean for businesses.

The proposed reform could eliminate the requirement to appoint a data protection officer for companies with 20 or more employees—here’s what that means.

The government wants to ease the data protection burden on nonprofit organizations and small businesses—here’s what’s planned and what will continue to apply.
The Munich Higher Labor Court limits the right to a copy of internal compliance reports – inspection may be sufficient.
The BGH clarifies: Data protection obligations do not end with the order processing contract – and the loss of control over data justifies compensation for damages.
The ECJ rules: Operators of online marketplaces are jointly responsible under data protection law if users publish personal data in advertisements.
Employer may google – but must provide information. 1,000 in damages for GDPR violation in the application process.
Unsolicited e-mail advertising can be legally prosecuted. Find out how you can defend yourself against unsolicited advertising emails.
Companies are generally liable for breaches of data protection by their employees, even if they have acted against instructions to the contrary.

The Higher Regional Court of Dresden found that, in addition to the company, the managing director of a GmbH is also to be classified as the controller under data protection law and is therefore personally liable for the data protection breach.