Compliance with data protection regulations is a fundamental requirement in almost all areas of business and public administration. Whilst information processing is indispensable, it is also essential to continue to safeguard the civil liberties of ‘data subjects’, particularly in the light of ever-advancing technological developments. This commentary presents the law that resolves this conflict in a practical manner. The regulations that specifically address the digital lives of the population require particular attention.
The 4th edition (2026) takes account of current legislative developments, particularly in relation to digital services, artificial intelligence and the European Health Data Space. It also incorporates recent case law, academic literature and statements from data protection supervisory authorities.
Sebastian Schulz and Erik Petersen of HÄRTING also contributed to the commentary. In the 4th edition, Erik Petersen has, for the first time, taken on the task of analysing Article 9 of the GDPR, which governs the processing of special categories of personal data.