Live insights on data security & compliance

External data protection officers are under growing pressure today: clients expect not just legally sound advice, but actionable, verifiable solutions – especially when it comes to deletion obligations, retention periods, and handling unstructured data in file shares, M365/SharePoint, email, and collaboration tools. In this webinar, "Call to All External DPOs: Expanding Your Advisory Approach and Implementing Automated Deletion Concepts," we show you how to strategically expand your portfolio: moving away from pure concept papers toward a pragmatic, technically feasible deletion and cleanup concept that truly relieves your clients – and opens up new consulting and project opportunities for you. You will learn: How to develop a deletion concept that connects GDPR requirements with operational reality How to resolve typical blockers: lack of data overview, unclear responsibilities, shadow storage, historical data stocks ("dark data") How automated cleanup works in unstructured data How to position this topic cleanly as an external DPO By the end, you will take away a clear methodology for building GDPR-compliant deletion routines at client organizations, reducing risks (data breaches, effort around data subject requests, liability issues), and making data protection measurable – without overburdening the organization with "paper processes." Ideal for external DPOs who want to combine advisory work with implementation and strengthen their mandates for the long term.

At our web conference "Energy/Water Industry," we present up to seven solutions/services on the respective featured topic over the course of one morning. The morning is kicked off with an expert keynote.

For ten years, the IT-Tagung für Kirche und Wohlfahrt has been the meeting point for everyone shaping digitalization with purpose, responsibility, and foresight. What began as a platform for exchange has developed into a fixed venue for inspiration, encounters, and concrete solutions. In 2026 too, we will once again bring together what belongs together: forward-looking talks, practical insights, and a diverse range of exhibitors. At the Alter Postlager in Mainz, the character of a place in transformation meets the topics that move our industry – from current challenges to the questions of tomorrow. Look forward to two days full of inspiration, exchange, and new perspectives – and become part of a network that thinks IT in church and welfare organizations further together. Be part of our anniversary!

360° data protection: The future of data security Since the Bitkom Privacy Conference in September 2025, the regulatory landscape has continued to evolve rapidly. The interplay of GDPR, the Data Act, and the AI Act creates an increasingly complex regulatory framework for organizations of every size. At the same time, artificial intelligence, data-driven business models, cloud technologies, and cross-border data flows are accelerating digital transformation. New case law, geopolitical shifts, and active supervisory practice are increasing the pressure to act, while also opening up new opportunities for innovation and strategic positioning. On September 29 and 30, 2026, the Bitkom Privacy Conference will once again bring together leading data protection experts from supervisory authorities, companies, academia, and startups. The focus will be on current regulatory developments, practical implementation challenges, and strategic perspectives for a future-proof approach to data protection. Building on our established 360° approach, #pco26 addresses key topics – including the "Digital Omnibus," the use of AI and data-driven technologies, international data transfers, recent decisions by the German Federal Court of Justice and the European Court of Justice, as well as questions around cookies, tracking, and ePrivacy. The first conference day, September 29, 2026, takes place on-site at the Futurium in Berlin and focuses on German and European perspectives. On September 30, 2026, the conference opens its digital stage for international discussions and global insights via livestream. Join us and stay up to date on the most important developments in data protection!

Many security stacks are strong on perimeter, detection, and response – yet a blind spot remains: credentials and secrets. In practice, passwords, API keys, tokens, and access credentials end up everywhere: in tickets, Confluence/wikis, SharePoint/Teams chats, emails, config files, scripts, backups, log files, or even in code repositories. This is exactly where attackers strike – often long before a SOC alert even triggers meaningfully. In this webinar, "SOC and firewalls aren't enough, because your passwords are lying around in plain text everywhere," we show, from an IT security perspective, why plaintext credentials are a massive risk lever and how you can get the problem structurally under control – with an approach that combines visibility, prevention, and remediation. You will leave with a practical roadmap for systematically finding, prioritizing, and eliminating plaintext passwords – noticeably reducing the risk of ransomware, data leaks, and account takeover.

Business meets supervisory authorities The BvD-Herbstkonferenz on October 14 and 15, 2026 in Stuttgart is a meeting point for professional exchange on the currently pressing issues of data protection in both the public and private sectors. For the tenth time now, the BvD is holding the conference together with the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, the Bavarian State Office for Data Protection Supervision, and the Bavarian State Commissioner for Data Protection. Focus on data protection in public authorities Data protection officers from administrations, schools, and other public-sector institutions come together at the established Behördentag. Here too, a full day of keynotes, panels, and a lecture program awaits you. A first this year: the sessions of the Behördentag will take place in a slot running parallel to the Herbstkonferenz.

A guide through case law, regulation, and technology Cyber Resilience Act: When IT, compliance, and privacy need to sit at the same table Omnibus and data protection: Is regulatory relief on its way? Global data protection in practice: From regulatory complexity to clear structures Algorithm instead of gut feeling? Automated candidate selection at the intersection of GDPR and the AI Act

Data subject access requests (DSARs) are among the most time-consuming obligations in everyday privacy work: tight deadlines, high expectations, many systems involved – and particularly high risk when it comes to unstructured data such as emails, Office documents, PDFs, chat exports, or file shares. At the same time, third-party data must regularly be protected when responding to requests: redaction is mandatory – but doing it manually costs time, money, and nerves. In this webinar, "Data subject requests: process quickly, redact automatically, and hand over," we show data protection officers and privacy managers how the DSAR process can be standardized and accelerated – from search to handover. You will learn: How to efficiently find relevant information in unstructured data sources (M365/SharePoint, file shares, email, collaboration tools) How automatic redaction works: third-party personal data, secrets/confidential information, context checks, and quality controls How to provide responses cleanly: export, packaging, and logging By the end, you will take away a field-tested process model for fulfilling data subject requests faster, more securely, and with less manual effort – including tips for avoiding typical pitfalls (data sprawl, duplicates, overly broad search scopes, unclear responsibilities). Ideal for anyone who wants to handle DSARs not just "somehow," but efficiently and in an audit-ready way.