Secu4: IT Law and Data Protection for IT Controllers

Topics

Cloud agreements, international data transfer, ECJ Schrems II – Transfer Impact Assessment, DSK prohibits M 365 – still applicable?

New Whistleblower Protection Act, setting up internal reporting office in compliance with the law

Mobile working, working from home, BYOD, video conferences

Data transfer within the group, group-wide projects such as "Talentpool"

Processing rights to information/erasure correctly

Ransomware and malware, duties requiring action

Liability for IT security breaches, Section 130 German Act on Regulatory Offences (OWiG)

Telecommunications-Telemedia Data Protection Act (TTDSG), cookies, consent banner

Organizing erasure concept, implementing DIN 66398, e-mail archiving

Incidents and data protection incidents – acting appropriately, IoT problem

 

IT security concept – encryption obligations, SIEM solutions, DLP

Using social networks in a legally watertight manner (among others WhatsApp, Instagram, TikTok), social media recruiting

Facebook prohibition by the authorities – What now, turning everything off?

Legal certainty regarding AI, ChatGPT, Copilot, etc. (data protection and copyright)

IT usage guidelines, works agreement

Employee checks, private use

Imposition of fines under the GDPR – rRsk posed to claims for compensation under the GDPR

Liability risks for IT managers, avoidance strategies

Technical requirements

Basic knowledge and good general education in the area of IT

Duration

One day