Sebastian Schulz

Data protection requirements are constantly evolving. This commentary on the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) offers practical and well-founded guidance on how to deal with the complex requirements of data protection law. The 4th edition (2026) takes account of the latest legislative developments, particularly in relation to digital services, artificial intelligence and the European Health Data Space. The latest case law, particularly that of the Court of Justice of the European Union (CJEU), as well as recent statements from data protection supervisory authorities, have also been incorporated into the commentary. The commentary combines academic rigour with practical solutions, thereby offering valuable guidance on the legally compliant processing of personal data in businesses, public authorities and legal practice. The contributors also include Sebastian Schulz and Erik Petersen of HÄRTING, who, in the 4th edition, have for the first time taken on the commentary on Article 9 of the GDPR concerning the processing of special categories of personal data.

The 4th HÄRTING AI Day will take place in Berlin on 19 November 2026. The event will focus on current issues relating to artificial intelligence, the AI Act, data protection and the practical application of AI in businesses.

The SCHUFA before the ECJ or: "How to pimp my creditscore - Why the renewed swansong on the SCHUFA score is misguided" - Critical comments on the Advocate General's Opinion.