Suchergebnisse

• eJournal-Artikel aus "PinG Privacy in Germany" Ausgabe 1/2026

  What regulators need for the first big evaluation of the DSA

  Johannes Heidelberger

  …. A first review is due in 2027. It should be driven by facts and the early results of investigations, not misconstrued criticism, argues Johannes… …Heidelberger. I. An online safety law in the crosshairs of international politics When they started working on it a good five years ago, most lawmakers behind… …the EU’s Digital Services Act (DSA) likely did not expect it to ever turn into the bone of contention in high-level political discussions. Yet, in 2025… …understand where these diametrically opposed points of view come from, it is important to appreciate the background of the DSA’s development and its current… …freedom of expression (including potential chilling effects on it) with other fundamental rights. These other rights had been protected by the 28 | PinG… …Behörden. legal order in the offline world for a long time; be it by intellectual property rights that limit freedom of expression, or by criminal… …initiatives by the platforms but it was also informed by years of research and advocacy from academia and civil society, as a counterweight to corporate… …. “Content” is understood quite broadly in the DSA. It is not merely videos and posts on social media but also encompasses products and services on online… …marketplaces. Moreover, it is important to note that the DSA does not define what is illegal content. Rather, national and other Union laws lay down under which… …of all kinds are now directly account- able to their users to a higher degree. This marks a major shift: it reflects a growing recognition that users’…

  Alle Treffer im Inhalt anzeigen
• eJournal-Artikel aus "PinG Privacy in Germany" Ausgabe 4/2026

  Main privacy issues in Norway 2025 - 2026

  Arve Føyen

  …shows the Norwegian Data Protection Authority widening what it treats as its mandate. In 2025 it consolidated established law on valid consent, special… …geopolitical and sovereignty debates that came to define early 2026. So far in 2026, there has been significant activity in the privacy area in Norway and it is… …. bb) Grindr’s Appeal to Personvernnemnda (the Privacy Appeals Board) Grindr appealed the fine in February 2022, arguing that it did not process special… …categories of data, that it had obtained valid consent, that there was no legal basis for a fine, and that The Norwegian DPA had misapplied the fine provisions… …was ongoing for almost two years. The Board also noted it was an intentional act. Grindr had consciously chosen a technical solution that made it… …with or preferred by heterosexuals, and who, due to Norway’s demographics, do not need to market themselves to them. It implies a restric- tion on the… …the sexual orientations that Grindr targets in its marketing. Therefore, it is information about someone’s “sexual orientation”, and in any case… …EEA establishment, it was still fully subject to the GDPR by virtue of offering services to users in Norway. 2. Children’s Privacy & Age Verification on… …sufficiently assessed. A particular point of contention was who should be responsible for verification. The Norwegian DPA warned that leaving it to tech… …this time, and that the proposal should be further investigated before it is implemented. They recommended viewing the proposal for age verification…

  Alle Treffer im Inhalt anzeigen
• eJournal-Artikel aus "Zeitschrift Interne Revision" Ausgabe 4/2026

  Von Phishing zu Ransomware

  Ein Beitrag zur Risikobeurteilung für die Interne Revision im Mittelstand
  

  Prof. Dr. Matthias Knoll, Michael Neuy

  …zur alltäglichen Auseinandersetzung mit den vielfältigen Risiken im Kontext der IT. Denn schnell kann ein Fehler zur existentiellen Herausforderung für… …den Schutz entscheidender Unternehmensressourcen werden. Die richtige Reaktion auf IT- und auf Fachseite ist dann von fundamentaler Bedeutung für das… …(IT-)Revision, 16 umso mehr die Organisation dabei zu unterstützen, die IT- Funktion fortlaufend zu verbessern und Resilienz gegen Cybergefahren auf- und… …wichtige Kontakte. Für technologische Ursachen sind die einzelnen Abteilungen innerhalb der IT (beispielsweise Anwendungsbetreuung oder Netzbetrieb) oder die… …Sicherheit in der Informationstechnik (BSI-Gesetz – BSIG), § 8a Sicherheit in der Informationstechnik Kritischer Infrastrukturen, Abs. 1a. 34 NIS-2 ist für…

  Alle Treffer im Inhalt anzeigen

• Deepfakes und Phishing: Wie Unternehmen kritische Prozesse absichern

  …Die digitale Transformation verstärkt den Einfluss der Informationstechnologie auf den Unternehmenserfolg erheblich. Damit erhöhen sich auch die… …Anforderungen an das Führungssystem der IT in den Unternehmen. Hier gilt die einfache Weisheit: Ein ungeeignetes Managementsystem bringt in der Regel schlechtere… …organisationsgerechten Ausgestaltung des Führungssystems der IT leitet.…

  Alle Treffer im Inhalt anzeigen
• eJournal-Artikel aus "PinG Privacy in Germany" Ausgabe 1/2026

  Digital Entropy: Making Sense of the Disorder in Privacy, AI Governance, and Cybersecurity Law

  J. Trevor Hughes, David Botero

  …contribute to a growing body of standards for organizations operating in today’s digital economy to follow. 1 But the EU is not alone. It is not alone in… …as that navigation is, it is harder still to coordinate and operationalize an organizational response. Failing to do so can be hugely consequential to… …an organization’s efficacy, competitiveness in the market, integrity or even existence. In science, the directional arrow of entropy is immutable. It… …. It is possible to bend the arc of digital entropy back toward order. It is possible to tame the complexity of technological innovation and regulatory… …complexity of our digital regulatory world is ascending as a strategic priority within organizations. There is increasing recognition that it is no longer, if… …it ever was, sufficient to view digital governance down through the siloed vertical context of any one domain. Gone are the days where cyber law risks… …, for example, landed squarely with the cyber or IT department and privacy risks were addressed mainly by the legal department and seen through the lens… …organization delivers on its response to digital entropy. That said, triaging and deciding on all these factors does not take place in a vacuum. It takes place… …risks and critical compliance requirements. Finally, it allows for improved coordination across the subdomains of digital governance as cohabitation… …these extensions can be seen as logical, based on the disciplinary, regulatory and governance overlaps, or it can also be attributed to the lack of…

  Alle Treffer im Inhalt anzeigen
• eJournal-Artikel aus "PinG Privacy in Germany" Ausgabe 1/2026

  The Relevance of Value Decisions in Data Protection Law

  Jules Polonetsky

  …the world, is no longer an isolated field. It has become a locus where multiple societal values collide. Personal data is central to innovation and… …: “benefits”. It starts from recent shifts in regulatory approaches from some Data Protection Authorities facing the age of AI, looks at the increased… …Trade Commission. Ultimately, it builds on the relative and procedural nature of data protection in balancing values, interests and rights. PinG 1.26 | 33… …, not legitimate interest, even though it arguably involves far smaller and more predictable data flows than those used to train AI systems. This… …instrument. Article 8 of the EU Charter of Fundamental Rights grants a right to data protection, but it exists within a system that also protects freedom of… …proportionality.” Balancing, however, does not mean arbitrariness. It requires structured reasoning by evaluating the legitimacy of the purpose, the necessity of the… …legitimate interest basis, it is implicitly determining that the public benefit of AI research outweighs the individual privacy loss — provided certain… …safeguards exist. When the Italian Garante temporarily banned ChatGPT for inadequate transparency, it did not reject AI training per se but insisted that… …Section 5 of the FTC Act, a practice is “unfair” if it causes substantial injury to consumers that is not outweighed by countervailing benefits to consumers… …rights-based proportionality. Yet functionally, it serves a similar purpose: it recognizes that not all data practices producing risk are equally unjustified…

  Alle Treffer im Inhalt anzeigen
• eJournal-Artikel aus "PinG Privacy in Germany" Ausgabe 3/2026

  The role of the European Data Protection Supervisor under the AI Act: institutional transformation, regulatory challenges, and first lessons learned

  Sonia Perez Romero, Rossella Andronico

  …interact with private-sector operators or public EU institutions. It also positions EUIs at the core of an ethical, transparent, and accountable use of AI… …the specific nature of Union institutions, agencies and bodies falling within the scope of this Regulation” 7 the AI Act considered it appropriate to… …powers. In particular, the AI Act also (1) designates the EDPS as a notified body empowering it to carry out third-party conformity assessment activities… …falling within the scope of this Regulation. 12 Before examining how the EDPS has begun operationalising these tasks, it is necessary to acknowledge the… …, offices or agencies including those based on general-purpose AI models developed by the same provider. Finally, it is also important to flag that the… …the trialogues and find an agreement on it before the relevant rules of the AI Act become applicable on 2 August 2026. III. EDPS’ initial steps to… …management and supervision. From the outset, the EDPS took an interinstitutional cooperative approach which it considers essential to support the proper… …on AI governance. This network is based on the empowerment of “AI leads” appointed by the highest level of management at each one of the EUIs. It is… …28 , where AI Act Correspondents helped with identifying potential high-risk AI systems and communicate them to the EDPS for it to build its… …just a “snapshot” of a particular juncture in the evolution of the use of AI by the EUIs — a situation likely to evolve rapidly — it has already yielded…

  Alle Treffer im Inhalt anzeigen

• Vom Risiko-Radar zur Frühwarnfähigkeit

  …Tagesgeschäft oft untergehen. 2. Risiko-Radar aufbauen: Hinweise aus IT, Einkauf, Compliance, Vertrieb, Marktbeobachtung und Geopolitik gehören zusammengeführt…
• eJournal-Artikel aus "Risk, Fraud & Compliance" Ausgabe 3/2026

  Der Post Office/Horizon IT-Skandal in den UK

  Wie Softwarefehler, Fehlverhalten und fehlende Corporate Governance zu einem Jahrhundertskandal führten - Teil 2
  

  Jan Schmeisky

  …ZRFC 3/26 130 Corporate Governance | Horizon IT | Forensic Audit | Professional Liability Der Post Office/Horizon IT-Skandal in den UK Wie… …auf. Das Werk von Nick Wallis mit dem Titel „The Great Post Office Scandal – The fight to expose a multimillion pound IT disaster which put innocent… …Mortem: The Post Office Horizon IT Scandal“ (ISBN 978–1901784763) gilt als die erste umfassende forensische Analyse der politischen, institutionellen und… …Sonderuntersuchungen. 1 Computer Weekly, Special Report: Post Office IT system defects, abruf bar unter https://www.computerweekly.com/… …, The Post Office Horizon IT Scandal, London 2025, S. 12 ff. 4 Hughes, G., Mr Bates vs The Post Office, ITV, 2024. Der Post Office/Horizon IT-Skandal in… …Ent- 13 Williams, W., Post Office Horizon IT Inquiry, End of Year Review, 2025, abruf bar unter… …https://www.postofficehorizoninquiry.org.uk/news/end-year-newsletter-review-postoffice-inquiry-2025 (Stand: 11. 03. 2026). 14 Williams, W., Post Office Horizon IT Inquiry, a. a. O., S. 4 f. 15 Department for Business and Trade, Compensation to… …the Post Office Horizon IT Inquiry. 23 Kenyon, M., Government contracts awarded to Fujitsu even after Mr Bates drama, City AM, 2025. 24 Solicitors… …Regulation Authority, Update on the SRA investigation on the Post Office Horizon IT scandal, abruf bar unter…

  Alle Treffer im Inhalt anzeigen

• AI Act: Pflichten gelten, Aufsicht noch im Aufbau

  …, Compliance, Datenschutz, Einkauf und IT. ChatGPT in der Unternehmenspraxis von Wolfhart Fabarius Der Einsatz von Künstlicher Intelligenz…