Laura Emmeluth

Since the entry into force of the DiRUG (Act implementing the Digitalisation Directive) and the DiREG (Act supplementing the provisions for the implementation of the Digitalisation Directive), the Commercial Register has been fully and freely accessible to the public in electronic form. The personal data stored there can thus be extracted and consolidated on a...

Since December 6, 2025, the European NIS2 Directive has been implemented in Germany in the Act on the Federal Office for Information Security (BSIG). The so-called BSIG introduces binding obligations in the area of IT and cybersecurity for many companies in affected sectors for the first time. A key point here is the reporting obligations...

On November 13, 2025, the European Court of Justice (ECJ) (judgment of November 13, 2025 – Case C-654/23) clarified the rules for sending newsletters to existing customers. The subject of the decision was the interpretation of Art. 6 (1) GDPR and Art. 13 (1) and (2) of the Privacy and Electronic Communications Directive (Directive 2002/58/EC,...