News & Insights

Whether Microsoft 365 can be used in compliance with data protection law cannot be answered with a blanket yes or no. What matters is the specific way in which it is used in the respective company. The situation has improved since 2022, but parts of the criticism previously raised by supervisory authorities remain. We explain the actual risks, the current position of the authorities and the measures that matter now.

Data increases enterprise value only if it is economically usable, legally exploitable and technically protected. Missing legal bases, weak IT security or unclear data quality can turn what appears to be a value driver into a concrete deal risk. We explain how private equity investors and deal teams can systematically assess data value, data protection and IT security in due diligence and translate the findings into concrete deal mechanics.

Cookie banners are intended to safeguard data protection, yet many users now click “Accept” out of sheer frustration. At the same time, pressure for reform is growing at EU level. What does this mean for companies? And what requirements actually apply today? An overview of the legal framework, practical challenges, and available courses of action.

The German Federal Office for Information Security (BSI) is warning that AI-supported systems could soon be able to identify security vulnerabilities at scale. For companies, this is no longer a future scenario. It is a reason to fundamentally rethink vulnerability management now. And the CRA clock is already ticking.