Practitioner-grade compliance knowledge
Practitioner-grade articles on GDPR, NIS2, the EU AI Act, the German Whistleblower Protection Act (HinSchG) and Pay Transparency. Step-by-step guides, checklists, Federal Labour Court (BAG) rulings and case studies. No legalese — compliance from practice.
Choose your focus area
144 specialist articles, structured along the five most important EU regulations for SMEs in Germany and Austria and the topic of accessibility. Each topic with pillar articles, practice clusters, listicles and a glossary.
GDPR & data protection
Record of processing activities, processing on behalf of a controller, technical and organisational measures under Art. 32, DPIA, cookie banners, Schrems II, personal data breach notification — the practical GDPR track for SMEs in Germany and Austria.
→ View GDPR articles
EU AI Act & AI governance
EU AI Act (Regulation (EU) 2024/1689) fully applicable to Annex III from 2 December 2027 (Regulation (EU) 2026/1744 (Digital Omnibus AI), in force since 27 July 2026; the general date of application of 2 August 2026 remains): risk classification, Annex III, GPAI, AI literacy since 2 February 2025, transparency obligations under Art. 50.
→ View EU AI Act articles
NIS2 & cybersecurity
NIS2UmsuCG in force since 6 December 2025 (Germany), Austrian Network and Information Systems Security Act 2026 (NISG 2026) in Austria from 1 October 2026: 10 Section 30 BSIG obligations (German BSI Act), § 38 management liability, building an ISMS, supply chain security, incident response 24/72/30.
→ View NIS2 articles
Whistleblower protection
HinSchG in force since 2 July 2023; anonymous reports should be processed (§ 16(1), no obligation); HinSchGOWiZustV in force since 15 April 2025: setting up an internal reporting channel, confidentiality concept under § 8, prohibition of reprisals under § 36, hybrid group model under § 14. Note: § 22 = reporting office of the Federal Cartel Office (Bundeskartellamt) (competition law).
→ View HinSchG articles
Anti-discrimination & pay transparency
EU Pay Transparency Directive 2023/970 (transposition deadline of 7 June 2026 has passed, national act still pending): § 12 of the German General Equal Treatment Act (AGG), complaints body, reversal of the burden of proof under § 22 AGG (incl. AI recruiting), pay-gap calculation + Joint Pay Assessment.
→ View AGG · Pay Transparency articles
Accessible documents & websites
Directive (EU) 2016/2102, WZG and state laws, BITV 2.0, BFSG and BaFG: obligations, cut-off dates, exceptions, accessibility statement, PDF/UA, WCAG 2.1, EN 301 549 and the monitoring bodies' findings.
→ View accessibility articles
Current focus articles
The most important articles for the 2026 compliance deadlines: HinSchG updates 2024–2026, EU Pay Transparency (transposition deadline 7 June 2026 passed), GPAI (fines from 8/2026), NIS2 (status in Germany and Austria).
EU Pay Transparency: transposition deadline of 7 June 2026 has passed, national act pending
Thresholds of 100/150/250, right to information, Joint Pay Assessment. Incl. pay-gap calculation spreadsheet.
HinSchG updates 2024–2026: what has changed?
Anonymous reports as a "should" recommendation without a cut-off date, fine ranges (§ 40), HinSchGOWiZustV, CJEU ruling C-149/23 of 6 March 2025.
GPAI provider obligations since 2 August 2025, fines from 2 August 2026
Art. 53-55 EU AI Act: code of practice + technical documentation + summary of training data.
Algorithmic discrimination in recruiting (legal position 2026)
Reversal of the burden of proof under § 22 AGG, Annex III no. 4 EU AI Act, Art. 26 deployer obligations, CJEU C-203/22. What employers need to check now.
Compliance deadline roadmap 2026/27/28
All 18 EU, German and Austrian deadlines on a single timeline. Printable as an A3 poster.
Compliance tool stack 2026
10 tools for GDPR/NIS2/AI Act/HinSchG/AGG. With prices + recommended order.
15 free tools & self-tests
5 interactive tools + 10 self-tests — ready to use immediately, no sign-up. Results are calculated locally in your browser; no data leaves your device.
5 interactive tools
NIS2 readiness check
10 questions · 4 areas · score + action plan
GDPR quick check
20-point checklist in 1 minute
EU AI Act quick test
5 questions · am I in scope of the AI Act?
Job advertisement audit
§ 22 AGG + pay transparency check
Fine calculator
GDPR/AI Act/NIS2/HinSchG/AGG combined
10 self-tests & audits
GDPR self-test
8 questions · record of processing activities, data processing agreement, technical and organisational measures, DPIA
Cookie banner audit
Conformity with § 25 of the German Telecommunications-Digital-Services Data Protection Act (TDDDG) in 8 questions
NIS2 self-test (full)
30 questions · 4 areas
NIS2 mandatory measures audit
Check the 10 Section 30 BSIG obligations
EU AI Act self-test
8 questions · risk classification
AI inventory quick check
FRIA preparation + GPAI flagging
HinSchG self-test
Effectiveness reviews in 8 questions (best practice)
AGG/pay transparency self-test
EU 2023/970 readiness check
Pay equity self-assessment
Pay-gap calculation + Joint Pay Assessment
Glossary with 134 specialist terms
Record of processing activities, FRIA, Section 30 BSIG, GPAI, pay equity audit, § 18 FAGG, Schrems II — defined briefly, with the relevant regulation and a practical example.
Open the glossary →