I. Introduction According to a Bitkom study from September 2018, German industry has incurred a total loss of 43 billion euros as a result of cyberattacks over the past two years. Seven out of ten industrial companies have been victims of such attacks during this period. At EU level, there has recently been a growing discussion on how to face this mounting danger ...
These days more and more use is being made of the Treaty rules on State aid. The European Commission is using the State aid rules in an innovative way to take over competence from the Member States in tax regulation by challenging the selectivity of national measures or rulings, which give preferable treatment to certain taxpayers ...
Inland ports are of significant importance for handling of freight. Most inland ports are trimodal (road, railways and waterways) and have the necessary infrastructure to handle freight coming from all over the world. Recent State aid measures address the increasing importance of inland ports and allow subsidisation predominantly for constructing infrastructure ...
The ePrivacy Regulation was actually supposed to enter into force on May 25, 2018 jointly with the EU General Data Protection Regulation. Now it is expected to go into effect in 2019 at the earliest. It has new provisions in store, particularly for online marketing. The ePrivacy Regulation is intended to replace the current European ePrivacy Directive (2002/58/EC) and the Cookie Directive (2009/136/EC) ...
The necessity of the contemplated Real Estate Transfer Tax Act amendments has been subject of intense discussions. The finance ministers of the German states reached agreement on introducing new tax provisions and on extending the scope of existing rules in June and November 2018 ...
Under its Article 88(1), the GDPR allows Member States to draw up their own rules for the area of employee data protection. Germany has taken advantage of this option with Section 26 of the Federal Data Protection Act (BDSG). The first sentence of Section 26(1) already applies while the decision to establish an employment relationship is made and hence it needs to be taken into account early in the application process ...
The Court of Justice of the European Union (ECJ) must currently clarify whether and how website operators can legally integrate the so-called "Like" button of Facebook on their website (Case C-40/17). A German online retailer had integrated the "Facebook Like" button into their online shop. Due to the functionality of the "Facebook Like" button, personal information was transmitted to Facebook Ireland each time the website was visited, including the IP address ...
The Brexit Withdrawal Agreement negotiated between the European Union and the United Kingdom envisaged that during the United Kingdom's transitional period data protection legislation would have been treated in the same way as with the countries of the European Economic Area. This would have allowed a transfer of personal data from the European Union to the United Kingdom without additional measures to ensure adequate levels of data protection ...
The use of the Internet without the use of search engines, which list links to Internet pages after keywords have been entered, is almost unthinkable. In the context of the search results, however, websites may appear that contain personal data and thus fall within the scope of the GDPR ...
The General Data Protection Regulation (GDPR) provides for a significant increase of the maximum possible fine for legal infringements compared to previous data protection legislation. Fines of up to 20 million euros or 4 percent of the worldwide annual turnover, whichever is higher, can be imposed (Art. 83 para. 5 GDPR). Yet, the first few months after the introduction of the GDPR in May 2018 were uneventful in this regard. That is now changing, however ...
In its decision from February 7, 2019, the Bundeskartellamt prohibited Facebook from the further processing of user data which it has generated from so-called third party sources. In order to make use of these personal data in future, Facebook will need the consent of the data subject as defined by the General Data Protection Regulation (GDPR). It remains to be seen whether this will be granted by the majority of users. 1 ...
On 13 March 2019, the State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg (LfDI BaWü) published the latest version of his guidebook on employee data protection. In this brochure, the LfDI BaWü offers an insight into his work and explains his opinion regarding the various points of view surrounding employee data protection ...
Companies will need to take appropriate steps in the future to protect their secrets. The new law on the protection of trade secrets places greater demands on the sensitivity of secrets to this extent. Whistleblowers can also reveal trade secrets with impunity - one more reason to set up a whistleblower hotline. Reverse engineering will be a permissible way of acquiring a trade secret in the future ...
The Regional Labor Court (LAG) of Baden-Württemberg, in its ruling of December 20, 2018 (Ref. 17 Sat 11/18), granted an employee a comprehensive right to information against his employer with regard to all personal data collected about his person. The right to information was explicitly confirmed in relation to personal data resulting from internal investigations and data from potential whistleblowers ...
The Regional Labor Court (LAG) of Baden-Württemberg, in its ruling of December 20, 2018 (Ref. 17 Sat 11/18), granted an employee a comprehensive right to information against his employer with regard to all personal data collected about his person. The right to information was explicitly confirmed in relation to personal data resulting from internal investigations and data from potential whistleblowers ...
Even before the General Data Protection Regulation (GDPR) came into force, there were discussions as to whether the use of tracking cookies, which make it possible to analyze the usage and browsing behavior of a user on the Internet and use it for interest-based advertising, requires prior consent (opt-in) of the user or whether a dissent solution (opt-out) is sufficient. The German data protection authorities are of the opinion that users must give their consent ...
The administrative fines that have been imposed by the different European supervisory authorities since the GDPR took effect vary enormously. While the highest administrative fines imposed by the German authorities to date have been EUR 20,000 and EUR 80,000 and have therefore remained well below the possible maximum fine of EUR 20 million or 4 % of worldwide annual turnover, other countries’ supervisory authorities have already delivered higher fines ...
The recent decision of the FOPH (FOPH, decision of 11.12.2018 - 1 ABR 13/17) gives additional grounds for further clarifying the practical question of to what extent the conduct of an employee survey is subject to worker participation by the works council. The Respondent - a parent company of a postal and logistics company - has been carrying out an annual Group-wide employee survey since 2007 using a standardized electronic questionnaire ...
Federal Labor Court, ruling of 19 December 2018 - 7 AZR 70/17 The provision of Sec. 41 p. 3 Social Code (SGB) VI allows employers and employees to postpone the termination of the employment relationship upon reaching the regular retirement age of the employee. According to a ruling of the German Federal Labor Court (BAG) of 19 December 2018 (Ref. 7 AZR 70/17), this regulation is compatible with higher-ranking law ...
FOPH of March 19, 2019 - 9 AZR 362/18 The statutory leave entitlement according to Sec. 1, 3 Federal Leave Act (BUrlG) also exists for the period of parental leave, but may be reduced by the employer pursuant to Sec. 17 (1) (1) Federal Parental Allowance and Parental Leave Act (BEEG). This requires a legal declaration completed upon receipt aimed at reduction. Sec. 17 (1) BEEG is in line with EU law ...
(FOPH, Ruling of 12.13.2018, 2 AZR 378/18) In a very helpful decision for the practice, the FOPH has commented on the procedure for consulting with the representative body for severely disabled persons before dismissals. It is sufficient for the employer to consult the representative body for severely disabled persons before notice of dismissal in accordance with the basic principles applicable to the participation of the works council pursuant to Sec ...
At European and national level, discussions have been going on for years on how best to protect the so-called whistleblowers from being victims of retaliation measures by those whose actions they have uncovered. Whistleblowers are persons who, as "insiders" (such as employees) disclose dubious practices of the institutions they serve. Here we think first and foremost of persons such as Edward Snowden, whose disclosures were directed against state measures ...
There are hardly any companies that do not use video surveillance systems (CCTV). Such systems record areas such as plant and work facilities or entrance areas. Oftentimes, the video images are not only displayed live on a monitor (“camera-to-monitor system”), but are also recorded automatically for a certain period of time ...
The topic of “joint controllers” according to Art. 26 GDPR continues to gain momentum. The State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg (LfDI) has now, for the first time, published a sample of an agreement for joint controllers under Art. 26(1) s. 2 GDPR as well as a sample relating to the fulfillment of obligations to inform the data subjects pursuant to Art. 26(2) s. 2 GDPR ...
It is here. The German Trade and Business Secrets Law (Geschäftsgeheimnisgesetz; GeschGehG) came into effect on April 26, 2019. Companies wishing to ensure protection of their business and trade secrets (such as customer, supplier and staff lists) in the future are required to take and document appropriate non-disclosure measures. This is effective immediately ...
