GDPR in Practice — Without Law and Without Scaremongering

Every piece you switch from Plan A to Plan B gives you more control. You don't need to switch all of them...

Privacy and information security end up in the same question: who is actually in control? The EU has given us a framework that…

A CRM migration became a rare opportunity to clean house. Why I'm now sending Art 14 emails to every contact — and…

The EU is proposing to ease the requirements for treatment protocols. But do you need them any less for that reason? No. Here's why.

Many small and medium-sized businesses have looked at NIS2 and thought that it only applies to a few large players. Energy, health,...

You've tidied up your supplier agreements. Good. But then the customer turns the question around: how do you handle our data? Suddenly...

You found the data processing agreement. You opened it. And you discovered that it describes a collaboration that no longer exists.

It started with a simple request from IT. Six months later, the vendor had access to far more than anyone had…

Most businesses treat privacy as a project with a start and end date. But a steak chef doesn't season the food just once...

AI and privacy in normal operations for boards and management AI streamlines. First drafts are written faster. Analysis goes faster. Reports are generated…

Why GDPR is becoming a side project – and how to build oversight, ownership, and routines that make GDPR business as usual...

... with examples you know. Many people think that “MFA” or “two-factor authentication” means we're safe. But phishing-resistant authentication is a...

GDPR Article 32 in Practice – and Why Security Must Be Business as Usual It's easy to think that a…

The moment the information is combined, the business has created a new processing activity.

The data processing agreement – a basis for a sensible clarification of cooperation regarding privacy!

This pits privacy against digital security and legal certainty for all of us – both in our private lives and in our work situations!

Have you ever wondered if your business's privacy policy truly meets the requirements?

M365 Copilot – feast or famine? With a focus on the privacy perspective and «tidying up internal affairs,» companies are getting closer to a real...

Privacy is not just a legal requirement – it is an ethical obligation. 

In a world where data is the new oil, privacy has become a currency in itself. Would you like to take…

GDPR compliance is not just a legal requirement; it shows the world that your company takes privacy seriously and protects the rights…