Gesetz: DSGVO 24 
ECJ C‑340/21: Ade­qua­te data secu­ri­ty (con­cept and bur­den of pro­of); lia­bi­li­ty for breaches
Ire­land: fine of EUR 345 mil­li­on against Tik­Tok – vio­la­ti­ons of the duty to inform and insuf­fi­ci­ent TOMs regar­ding children
Refe­rence: Moerel, What Hap­pen­ed to the Risk-Based Approach to Data Transfers?
EDSA: 2nd ver­si­on of the gui­de­lines on Pri­va­cy by Design and Pri­va­cy by Default / comm­ents on the systematics.