Insights on NIS-2, GDPR and the EU AI Act.
Articles on compliance and IT practice – clear and pragmatic.
All articles are for general information only and do not constitute legal advice.
NIS-2: Is my company affected?
Whether the NIS-2 directive applies depends on sector and company size. An overview of the criteria and the first steps.
NIS-2 reporting obligations: what to do in an incident
Early warning within 24 hours, notification within 72 hours, final report after one month: how companies prepare for the NIS-2 reporting deadlines.
GDPR in IT practice: the key obligations
Records of processing, data processing agreements, deletion concept: which GDPR obligations directly affect IT and how to implement them pragmatically.
Documenting TOMs properly: a pragmatic guide
Technical and organisational measures are mandatory under the GDPR and at the core of NIS-2. How to create documentation that is actually lived.
EU AI Act: what companies need to know now
Risk classes, AI literacy and staggered deadlines: an overview of the AI Act and what it means for companies that use AI.