Data protection
Data protection has become an integral part of daily compliance work. If these two issues do not go hand in hand, there is a risk of “paying” for the goal of compliance with a breach of data protection. In this case, there is a risk of imprisonment, fines, claims for damages and reputational damage. So there are good reasons not to take data protection lightly.
However, day-to-day application raises complex issues. The participation rights and obligations of various functions and committees, such as the data protection officer, the works council or the spokesperson committee, must be taken into account, as must the involvement of relevant adjacent areas such as legal, IT and HR. In addition, data protection measures have an impact on a wide variety of processes within the company and, particularly within the Group, a wide variety of jurisdictions must be taken into account.
focus-
points
As the “Data Protection and Compliance Working Group” is primarily concerned with supporting those responsible for compliance within the company, the focus is on practical implementation aids for day-to-day compliance work. Accordingly, the working group will deal with the following topics, among others, in the future:
– Reasons for consideration in the context of Section 32 BDSG
– Data protection information and consent to compliance measures
– Do’s and don’ts for IT technical compliance measures
– Involvement of the works council and the spokesperson committee in compliance measures
– Potential for conflict between data protection officer and compliance officer.
The working group also intends to develop guidelines on other topics such as cross-border data transfer in compliance work, the impact of data protection on the prevention of money laundering and cooperation with investigating authorities.
The working group management is looking forward to a lively exchange with DICO members and welcomes all those interested in the data protection working group.
working group results
Working group leader
Patrick Radner
Head of Data Protection
at thyssenkrupp AG
Patrick Radner is responsible for the Compliance Management System Data Protection (CMS DP) at thyssenkrupp and Head of Data Protection at thyssenkrupp AG. Since 2011, he has been responsible for setting up, expanding and continuously developing the CMS DP throughout the thyssenkrupp Group. In this context, he advises the thyssenkrupp companies on all aspects of data protection. Since 2020, Mr. Radner has also been responsible for a team that offers data protection consulting services internally as a service.
Barbara Scheben
Partner & Head of Forensic at KPMG AG
Barbara Scheben is a partner and Head of Forensic at KPMG AG Wirtschaftsprüfungsgesellschaft. As part of her work, she deals with applied data protection on a daily basis. This includes both organizational advice on data protection management systems and the detection and clarification of data protection breaches.
- 030 - 27 58 20 20
- info@dico-ev.de