c8e5e498b5
- Matrix-Zeilen aufklappbar: Klick zeigt Branchenrelevanz-Erklaerung, Beschreibung und Gueltigkeitsdatum - 27 Branchen-Zuordnungen korrigiert: - OWASP/NIST/CISA/SBOM-Standards → alle (Kunden entwickeln Software) - BSI-TR-03161 → leer (DiGA, nicht Zielmarkt) - BSI 200-4, ENISA Supply Chain → alle (CRA/NIS2-Pflicht) - EAA/BFSG → +automotive (digitale Interfaces) - 264 horizontal, 42 sektorspezifisch, 14 nicht zutreffend Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
4332 lines
142 KiB
JSON
4332 lines
142 KiB
JSON
{
|
|
"doc_types": [
|
|
{
|
|
"id": "eu_regulation",
|
|
"label": "EU-Verordnungen",
|
|
"icon": "🇪🇺",
|
|
"sort": 1
|
|
},
|
|
{
|
|
"id": "eu_directive",
|
|
"label": "EU-Richtlinien",
|
|
"icon": "📋",
|
|
"sort": 2
|
|
},
|
|
{
|
|
"id": "eu_guidance",
|
|
"label": "EU-Leitfaeden & Guidance",
|
|
"icon": "📘",
|
|
"sort": 3
|
|
},
|
|
{
|
|
"id": "de_law",
|
|
"label": "Deutsche Gesetze",
|
|
"icon": "🇩🇪",
|
|
"sort": 4
|
|
},
|
|
{
|
|
"id": "at_law",
|
|
"label": "Oesterreichische Gesetze",
|
|
"icon": "🇦🇹",
|
|
"sort": 5
|
|
},
|
|
{
|
|
"id": "ch_law",
|
|
"label": "Schweizer Gesetze",
|
|
"icon": "🇨🇭",
|
|
"sort": 6
|
|
},
|
|
{
|
|
"id": "national_law",
|
|
"label": "Nationale Datenschutzgesetze (EU)",
|
|
"icon": "🌍",
|
|
"sort": 7
|
|
},
|
|
{
|
|
"id": "bsi_standard",
|
|
"label": "BSI Standards & TR",
|
|
"icon": "🛡️",
|
|
"sort": 8
|
|
},
|
|
{
|
|
"id": "edpb_guideline",
|
|
"label": "EDPB/WP29 Leitlinien",
|
|
"icon": "📖",
|
|
"sort": 9
|
|
},
|
|
{
|
|
"id": "dsk_guidance",
|
|
"label": "DSK Orientierungshilfen",
|
|
"icon": "📄",
|
|
"sort": 10
|
|
},
|
|
{
|
|
"id": "court_decision",
|
|
"label": "Gerichtsurteile",
|
|
"icon": "⚖️",
|
|
"sort": 11
|
|
},
|
|
{
|
|
"id": "dsfa_list",
|
|
"label": "DSFA Muss-Listen",
|
|
"icon": "📋",
|
|
"sort": 12
|
|
},
|
|
{
|
|
"id": "nist_standard",
|
|
"label": "NIST Standards",
|
|
"icon": "🏛️",
|
|
"sort": 13
|
|
},
|
|
{
|
|
"id": "owasp_standard",
|
|
"label": "OWASP Standards",
|
|
"icon": "🔐",
|
|
"sort": 14
|
|
},
|
|
{
|
|
"id": "enisa_guidance",
|
|
"label": "ENISA Guidance",
|
|
"icon": "🇪🇺",
|
|
"sort": 15
|
|
},
|
|
{
|
|
"id": "international",
|
|
"label": "Internationale Standards",
|
|
"icon": "🌐",
|
|
"sort": 16
|
|
},
|
|
{
|
|
"id": "legal_template",
|
|
"label": "Vorlagen & Muster",
|
|
"icon": "📝",
|
|
"sort": 17
|
|
}
|
|
],
|
|
"industries": [
|
|
{
|
|
"id": "automotive",
|
|
"name": "Automobilindustrie",
|
|
"icon": "🚗"
|
|
},
|
|
{
|
|
"id": "maschinenbau",
|
|
"name": "Maschinen- & Anlagenbau",
|
|
"icon": "⚙️"
|
|
},
|
|
{
|
|
"id": "elektrotechnik",
|
|
"name": "Elektro- & Digitalindustrie",
|
|
"icon": "⚡"
|
|
},
|
|
{
|
|
"id": "chemie",
|
|
"name": "Chemie- & Prozessindustrie",
|
|
"icon": "🧪"
|
|
},
|
|
{
|
|
"id": "metall",
|
|
"name": "Metallindustrie",
|
|
"icon": "🔩"
|
|
},
|
|
{
|
|
"id": "energie",
|
|
"name": "Energie & Versorgung",
|
|
"icon": "🔋"
|
|
},
|
|
{
|
|
"id": "transport",
|
|
"name": "Transport & Logistik",
|
|
"icon": "🚚"
|
|
},
|
|
{
|
|
"id": "handel",
|
|
"name": "Handel",
|
|
"icon": "🏪"
|
|
},
|
|
{
|
|
"id": "konsumgueter",
|
|
"name": "Konsumgueter & Lebensmittel",
|
|
"icon": "📦"
|
|
},
|
|
{
|
|
"id": "bau",
|
|
"name": "Bauwirtschaft",
|
|
"icon": "🏗️"
|
|
}
|
|
],
|
|
"documents": [
|
|
{
|
|
"code": "GDPR",
|
|
"name": "DSGVO",
|
|
"full_name": "Datenschutz-Grundverordnung (GDPR) — Verordnung (EU) 2016/679",
|
|
"doc_type": "eu_regulation",
|
|
"description": "Die DSGVO ist das zentrale Datenschutzgesetz der EU. Sie regelt die Verarbeitung personenbezogener Daten und gibt Betroffenen umfangreiche Rechte (Auskunft, Loeschung, Datenportabilitaet). Gilt fuer alle Unternehmen, die Daten von EU-Buergern verarbeiten.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"effective_date": "25. Mai 2018",
|
|
"sort_order": 1,
|
|
"applicability_note": "Gilt fuer alle Branchen. Jedes Unternehmen das personenbezogene Daten verarbeitet faellt unter die DSGVO — unabhaengig von Branche oder Groesse."
|
|
},
|
|
{
|
|
"code": "AIACT",
|
|
"name": "EU AI Act",
|
|
"full_name": "Verordnung (EU) 2024/1689 — KI-Verordnung",
|
|
"doc_type": "eu_regulation",
|
|
"description": "Weltweit erste umfassende KI-Regulierung. Klassifiziert KI-Systeme nach Risiko (verboten, hoch, begrenzt, minimal) und stellt entsprechende Anforderungen. Hochrisiko-KI benoetigt CE-Kennzeichnung.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"effective_date": "1. August 2024 (gestaffelt bis 2027)",
|
|
"sort_order": 2,
|
|
"applicability_note": "Gilt fuer alle Branchen. Jedes Unternehmen das KI-Systeme einsetzt, entwickelt oder in Verkehr bringt faellt unter den AI Act. Die Risikoklassifizierung haengt vom Einsatzzweck ab, nicht von der Branche."
|
|
},
|
|
{
|
|
"code": "CRA",
|
|
"name": "Cyber Resilience Act",
|
|
"full_name": "Verordnung (EU) 2024/2847 — Cyber Resilience Act",
|
|
"doc_type": "eu_regulation",
|
|
"description": "Cybersicherheitsanforderungen fuer Produkte mit digitalen Elementen. Verpflichtet Hersteller zu Security-by-Design, Schwachstellenmanagement und Security-Updates ueber den Lebenszyklus.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"effective_date": "2024 (Uebergangsfristen bis 2027)",
|
|
"sort_order": 3,
|
|
"applicability_note": "Gilt fuer alle produzierenden Branchen. Der CRA betrifft jedes Unternehmen das Produkte mit digitalen Elementen herstellt — vernetzte Maschinen, IoT-Geraete, Software mit OTA-Updates, industrielle Steuerungen."
|
|
},
|
|
{
|
|
"code": "AMLR",
|
|
"name": "AML-Verordnung",
|
|
"full_name": "Verordnung (EU) 2024/1624 — Anti-Money Laundering Regulation",
|
|
"doc_type": "eu_regulation",
|
|
"description": "EU-weite Verordnung zur Bekaempfung von Geldwaesche und Terrorismusfinanzierung. Ersetzt die bisherigen Richtlinien durch direkt anwendbare Vorschriften. Schafft einheitliche Sorgfaltspflichten.",
|
|
"industries": [],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"effective_date": "2027 (gestaffelt)",
|
|
"sort_order": 4,
|
|
"applicability_note": "Nicht zutreffend fuer produzierende Industrie. Die AML-Verordnung regelt ausschliesslich den Finanzsektor (Banken, Versicherungen, Zahlungsdienstleister)."
|
|
},
|
|
{
|
|
"code": "BATTERIE_VO",
|
|
"name": "Batterieverordnung",
|
|
"full_name": "Batterieverordnung (EU)",
|
|
"doc_type": "eu_regulation",
|
|
"industries": [
|
|
"automotive",
|
|
"elektrotechnik",
|
|
"energie"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"sort_order": 5,
|
|
"applicability_note": "Sektorspezifisch: Automotive, Elektrotechnik, Energie. EU-Batterieverordnung fuer Hersteller und Importeure von Batterien."
|
|
},
|
|
{
|
|
"code": "DATAACT",
|
|
"name": "Data Act",
|
|
"full_name": "Verordnung (EU) 2023/2854 — Data Act",
|
|
"doc_type": "eu_regulation",
|
|
"description": "Regelt den Zugang zu und die Nutzung von Daten. Gibt Nutzern Rechte an Daten, die durch vernetzte Produkte erzeugt werden. Ermoeglicht Datenweitergabe und Cloud-Wechsel.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"effective_date": "12. September 2025",
|
|
"sort_order": 6,
|
|
"applicability_note": "Gilt fuer alle Branchen mit vernetzten Produkten. Der Data Act regelt Datenzugangsrechte bei IoT-Geraeten, vernetzten Maschinen und digitalen Diensten."
|
|
},
|
|
{
|
|
"code": "DGA",
|
|
"name": "Data Governance Act",
|
|
"full_name": "Verordnung (EU) 2022/868 — Data Governance Act",
|
|
"doc_type": "eu_regulation",
|
|
"description": "Schafft Rahmenbedingungen fuer Datenmaerkte und Datenaltruismus. Regelt Datenvermittlungsdienste und die Weiterverwendung geschuetzter oeffentlicher Daten.",
|
|
"industries": [],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"effective_date": "24. September 2023",
|
|
"sort_order": 7,
|
|
"applicability_note": "Nicht zutreffend fuer produzierende Industrie. Der DGA regelt Datenvermittlungsdienste und Datenaltruismus, nicht Hersteller."
|
|
},
|
|
{
|
|
"code": "DMA",
|
|
"name": "Digital Markets Act",
|
|
"full_name": "Verordnung (EU) 2022/1925 — Digital Markets Act",
|
|
"doc_type": "eu_regulation",
|
|
"description": "Reguliert digitale Gatekeeper-Plattformen. Stellt Verhaltensregeln fuer grosse Plattformen auf (Apple, Google, Meta, Amazon, Microsoft). Verbietet Selbstbevorzugung und erzwingt Interoperabilitaet.",
|
|
"industries": [],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"effective_date": "2. Mai 2023",
|
|
"sort_order": 8,
|
|
"applicability_note": "Nicht zutreffend fuer produzierende Industrie. Der DMA reguliert grosse digitale Gatekeeper-Plattformen (Apple, Google, Meta)."
|
|
},
|
|
{
|
|
"code": "DORA",
|
|
"name": "DORA",
|
|
"full_name": "Verordnung (EU) 2022/2554 — Digital Operational Resilience Act",
|
|
"doc_type": "eu_regulation",
|
|
"description": "Digitale operationale Resilienz fuer den Finanzsektor. Verpflichtet Finanzunternehmen zu umfassendem IKT-Risikomanagement, Vorfallmeldung, Resilienz-Tests und Drittanbieter-Management.",
|
|
"industries": [],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"effective_date": "17. Januar 2025",
|
|
"sort_order": 9,
|
|
"applicability_note": "Nicht zutreffend fuer produzierende Industrie. DORA regelt ausschliesslich den Finanzsektor (Banken, Versicherungen, Zahlungsdienstleister)."
|
|
},
|
|
{
|
|
"code": "DPF",
|
|
"name": "EU-US Data Privacy Framework",
|
|
"full_name": "EU-US Data Privacy Framework",
|
|
"doc_type": "eu_regulation",
|
|
"description": "Angemessenheitsbeschluss fuer Datentransfers in die USA. Nachfolger des gekippten Privacy Shield. Ermoeglicht Datenuebermittlungen an zertifizierte US-Unternehmen ohne zusaetzliche Garantien.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"effective_date": "10. Juli 2023",
|
|
"sort_order": 10,
|
|
"applicability_note": "Gilt fuer alle Branchen. Jedes Unternehmen das personenbezogene Daten in die USA uebermittelt kann das Data Privacy Framework nutzen."
|
|
},
|
|
{
|
|
"code": "DSA",
|
|
"name": "Digital Services Act",
|
|
"full_name": "Verordnung (EU) 2022/2065 — Digital Services Act",
|
|
"doc_type": "eu_regulation",
|
|
"description": "Reguliert digitale Dienste und Plattformen. Schafft Pflichten fuer Online-Vermittler, Hosting-Dienste und Plattformen. Sehr grosse Plattformen (VLOPs) haben erweiterte Pflichten.",
|
|
"industries": [],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"effective_date": "17. Februar 2024",
|
|
"sort_order": 11,
|
|
"applicability_note": "Nicht zutreffend fuer produzierende Industrie. Der DSA reguliert Online-Plattformen und digitale Vermittlungsdienste, nicht Hersteller."
|
|
},
|
|
{
|
|
"code": "EHDS",
|
|
"name": "EHDS",
|
|
"full_name": "Verordnung (EU) 2025/327 — Europaeischer Gesundheitsdatenraum",
|
|
"doc_type": "eu_regulation",
|
|
"description": "Schafft den Europaeischen Raum fuer Gesundheitsdaten. Ermoeglicht Primaernutzung (Patientenrechte) und Sekundaernutzung (Forschung, KI-Training) von Gesundheitsdaten unter strengen Auflagen.",
|
|
"industries": [],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"effective_date": "2025 (gestaffelt bis 2029)",
|
|
"sort_order": 12,
|
|
"applicability_note": "Nicht zutreffend fuer produzierende Industrie. Der EHDS betrifft den Gesundheitssektor und Gesundheitsdatenverarbeitung."
|
|
},
|
|
{
|
|
"code": "EUCSA",
|
|
"name": "EU Cybersecurity Act",
|
|
"full_name": "Verordnung (EU) 2019/881 — EU Cybersecurity Act",
|
|
"doc_type": "eu_regulation",
|
|
"description": "Schafft den EU-Rahmen fuer Cybersicherheitszertifizierung und staerkt die ENISA. Ermoeglicht EU-weite Zertifizierungsschemata fuer IT-Produkte, -Dienste und -Prozesse.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"effective_date": "27. Juni 2019",
|
|
"sort_order": 13,
|
|
"applicability_note": "Gilt fuer alle Branchen. Rahmenwerk fuer Cybersicherheitszertifizierung betrifft alle Unternehmen die IT-Produkte und -Dienste einsetzen oder herstellen."
|
|
},
|
|
{
|
|
"code": "EU_IFRS",
|
|
"name": "EU-IFRS",
|
|
"full_name": "Verordnung (EU) 2023/1803 — International Financial Reporting Standards",
|
|
"doc_type": "eu_regulation",
|
|
"description": "Konsolidierte Fassung der von der EU uebernommenen IFRS/IAS/IFRIC/SIC. Rechtsverbindlich fuer boersennotierte EU-Unternehmen.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"effective_date": "16. Oktober 2023",
|
|
"sort_order": 14,
|
|
"applicability_note": "Gilt fuer alle Branchen. IFRS-Rechnungslegungsstandards betreffen boersennotierte Unternehmen jeder Branche."
|
|
},
|
|
{
|
|
"code": "GPSR",
|
|
"name": "General Product Safety",
|
|
"full_name": "Verordnung (EU) 2023/988 — Allgemeine Produktsicherheitsverordnung",
|
|
"doc_type": "eu_regulation",
|
|
"description": "Ersetzt die alte Produktsicherheitsrichtlinie. Stellt sicher, dass nur sichere Verbraucherprodukte auf den EU-Markt gelangen. Gilt auch fuer Online-Marktplaetze.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"effective_date": "13. Dezember 2024",
|
|
"sort_order": 15,
|
|
"applicability_note": "Gilt fuer alle produzierenden Branchen. Allgemeine Produktsicherheitsanforderungen fuer jeden Hersteller und Haendler von Verbraucherprodukten in der EU."
|
|
},
|
|
{
|
|
"code": "MACHINERY_REG",
|
|
"name": "Maschinenverordnung",
|
|
"full_name": "Verordnung (EU) 2023/1230 ueber Maschinen",
|
|
"doc_type": "eu_regulation",
|
|
"description": "Loest die alte Maschinenrichtlinie 2006/42/EG ab. Regelt Sicherheitsanforderungen fuer Maschinen und zugehoerige Produkte, CE-Kennzeichnung, Konformitaetsbewertung und Marktaufsicht.",
|
|
"industries": [
|
|
"maschinenbau",
|
|
"automotive",
|
|
"elektrotechnik",
|
|
"metall",
|
|
"bau"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"effective_date": "20. Januar 2027",
|
|
"sort_order": 16,
|
|
"applicability_note": "Sektorspezifisch: Maschinenbau, Automotive, Elektrotechnik, Metall, Bau. Betrifft Hersteller von Maschinen und zugehoerigen Produkten die in der EU in Verkehr gebracht werden."
|
|
},
|
|
{
|
|
"code": "MDR",
|
|
"name": "Medizinprodukteverordnung",
|
|
"full_name": "Medizinprodukteverordnung (EU) 2017/745",
|
|
"doc_type": "eu_regulation",
|
|
"industries": [],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"sort_order": 17,
|
|
"applicability_note": "Nicht zutreffend fuer die 10 Zielbranchen. Medizinprodukteverordnung betrifft Hersteller von Medizinprodukten."
|
|
},
|
|
{
|
|
"code": "MiCA",
|
|
"name": "MiCA",
|
|
"full_name": "Verordnung (EU) 2023/1114 — Markets in Crypto-Assets",
|
|
"doc_type": "eu_regulation",
|
|
"description": "Umfassende Regulierung fuer Kryptowerte, Stablecoins und Crypto-Asset-Dienstleister. Schafft EU-weiten Rechtsrahmen fuer Krypto-Maerkte mit Zulassungspflichten und Verbraucherschutz.",
|
|
"industries": [],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"effective_date": "30. Dezember 2024",
|
|
"sort_order": 18,
|
|
"applicability_note": "Nicht zutreffend fuer produzierende Industrie. MiCA reguliert Kryptowerte und Krypto-Dienstleister im Finanzsektor."
|
|
},
|
|
{
|
|
"code": "SCC",
|
|
"name": "Standardvertragsklauseln",
|
|
"full_name": "EU-Standardvertragsklauseln (2021/914/EU)",
|
|
"doc_type": "eu_regulation",
|
|
"description": "Vorgefertigte Vertragsklauseln fuer den internationalen Datentransfer. Erforderlich, wenn personenbezogene Daten in Drittlaender ohne Angemessenheitsbeschluss uebermittelt werden.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"effective_date": "27. Juni 2021",
|
|
"sort_order": 19,
|
|
"applicability_note": "Gilt fuer alle Branchen. Standardvertragsklauseln sind bei Datentransfers in Drittlaender ohne Angemessenheitsbeschluss von jedem Unternehmen einzusetzen."
|
|
},
|
|
{
|
|
"code": "EPRIVACY",
|
|
"name": "ePrivacy-Richtlinie",
|
|
"full_name": "Richtlinie 2002/58/EG (ePrivacy)",
|
|
"doc_type": "eu_directive",
|
|
"description": "Ergaenzt die DSGVO speziell fuer elektronische Kommunikation. Regelt Cookies, Tracking, Direktmarketing und Vertraulichkeit der Kommunikation.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"effective_date": "31. Juli 2002",
|
|
"sort_order": 1,
|
|
"applicability_note": "Gilt fuer alle Branchen. Die ePrivacy-Richtlinie regelt Cookies, Tracking und elektronische Kommunikation — betrifft jede Website und jeden Online-Dienst."
|
|
},
|
|
{
|
|
"code": "DIGITALE_INHALTE_RL",
|
|
"name": "Digitale-Inhalte-Richtlinie",
|
|
"full_name": "Richtlinie (EU) 2019/770 ueber digitale Inhalte und Dienstleistungen",
|
|
"doc_type": "eu_directive",
|
|
"description": "Gewaehrleistungsrecht fuer digitale Inhalte und Dienstleistungen. Regelt Maengelhaftung, Updates, Vertragsmaessigkeit und Kuendigungsrechte bei digitalen Produkten.",
|
|
"industries": [
|
|
"handel",
|
|
"konsumgueter",
|
|
"elektrotechnik"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"effective_date": "1. Januar 2022",
|
|
"sort_order": 2,
|
|
"applicability_note": "Sektorspezifisch: Handel, Konsumgueter, Elektrotechnik. Gewaehrleistungsrecht fuer digitale Inhalte und Dienste."
|
|
},
|
|
{
|
|
"code": "DSM",
|
|
"name": "DSM-Urheberrechtsrichtlinie",
|
|
"full_name": "Richtlinie (EU) 2019/790 — Digital Single Market Copyright",
|
|
"doc_type": "eu_directive",
|
|
"description": "Modernisiert das EU-Urheberrecht fuer das digitale Zeitalter. Enthaelt kontroverse Artikel zu Uploadfiltern (Art. 17) und Leistungsschutzrecht fuer Presseverleger (Art. 15).",
|
|
"industries": [
|
|
"elektrotechnik",
|
|
"konsumgueter"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"effective_date": "7. Juni 2021",
|
|
"sort_order": 3,
|
|
"applicability_note": "Sektorspezifisch: Elektrotechnik, Konsumgueter. Urheberrechtsrichtlinie betrifft Unternehmen die digitale Inhalte erstellen oder nutzen."
|
|
},
|
|
{
|
|
"code": "EAA",
|
|
"name": "European Accessibility Act",
|
|
"full_name": "Richtlinie (EU) 2019/882 — Barrierefreiheitsanforderungen",
|
|
"doc_type": "eu_directive",
|
|
"description": "Barrierefreiheitsanforderungen fuer Produkte und Dienstleistungen. Betrifft Computer, Smartphones, Bankdienstleistungen, E-Commerce, E-Books und mehr.",
|
|
"industries": [
|
|
"handel",
|
|
"konsumgueter",
|
|
"elektrotechnik",
|
|
"automotive"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"effective_date": "28. Juni 2025",
|
|
"sort_order": 4,
|
|
"applicability_note": "Sektorspezifisch: Handel, Konsumgueter, Elektrotechnik, Automotive. Barrierefreiheitsanforderungen fuer Produkte und Dienstleistungen mit digitalen Schnittstellen."
|
|
},
|
|
{
|
|
"code": "E_COMMERCE_RL",
|
|
"name": "E-Commerce-Richtlinie",
|
|
"full_name": "Richtlinie 2000/31/EG ueber den elektronischen Geschaeftsverkehr",
|
|
"doc_type": "eu_directive",
|
|
"description": "EU-Richtlinie ueber den elektronischen Geschaeftsverkehr. Regelt Herkunftslandprinzip, Informationspflichten, Haftungsprivilegien fuer Vermittler.",
|
|
"industries": [
|
|
"handel"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"effective_date": "17. Juli 2000",
|
|
"sort_order": 5,
|
|
"applicability_note": "Sektorspezifisch: Handel. Regelt den elektronischen Geschaeftsverkehr und Online-Handel."
|
|
},
|
|
{
|
|
"code": "KLAUSEL_RL",
|
|
"name": "Klausel-Richtlinie",
|
|
"full_name": "Richtlinie 93/13/EWG — Klausel-Richtlinie",
|
|
"doc_type": "eu_directive",
|
|
"industries": [
|
|
"handel"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"sort_order": 6
|
|
},
|
|
{
|
|
"code": "NIS2",
|
|
"name": "NIS2-Richtlinie",
|
|
"full_name": "Richtlinie (EU) 2022/2555 — Network and Information Security",
|
|
"doc_type": "eu_directive",
|
|
"description": "Cybersicherheitsrichtlinie fuer kritische und wichtige Einrichtungen. Erweitert NIS1 erheblich auf mehr Sektoren. Fordert Risikomanagement, Incident Reporting und Lieferkettensicherheit.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"effective_date": "17. Oktober 2024",
|
|
"sort_order": 7,
|
|
"applicability_note": "Gilt fuer alle Branchen ab bestimmter Groesse. NIS2 betrifft 'wesentliche' und 'wichtige' Einrichtungen in 18 Sektoren — darunter Energie, Transport, verarbeitendes Gewerbe, Chemie und digitale Infrastruktur."
|
|
},
|
|
{
|
|
"code": "OMNIBUS_RL",
|
|
"name": "Omnibus-Richtlinie",
|
|
"full_name": "Omnibus-Richtlinie (EU) 2019/2161",
|
|
"doc_type": "eu_directive",
|
|
"industries": [
|
|
"handel"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"sort_order": 8
|
|
},
|
|
{
|
|
"code": "PREISANGABEN_RL",
|
|
"name": "Preisangaben-Richtlinie",
|
|
"full_name": "Preisangaben-Richtlinie (EU)",
|
|
"doc_type": "eu_directive",
|
|
"industries": [
|
|
"handel"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"sort_order": 9
|
|
},
|
|
{
|
|
"code": "PLD",
|
|
"name": "Produkthaftungsrichtlinie",
|
|
"full_name": "Richtlinie 85/374/EWG — Produkthaftung",
|
|
"doc_type": "eu_directive",
|
|
"description": "Regelt die Haftung fuer fehlerhafte Produkte. Aktualisierte Version umfasst auch Software und KI. Hersteller haften verschuldensunabhaengig fuer Produktfehler.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"effective_date": "Ueberarbeitung 2024",
|
|
"sort_order": 10,
|
|
"applicability_note": "Gilt fuer alle produzierenden Branchen. Die Produkthaftungsrichtlinie betrifft alle Hersteller — einschliesslich Software und KI als Produkt."
|
|
},
|
|
{
|
|
"code": "PSD2",
|
|
"name": "PSD2",
|
|
"full_name": "Richtlinie (EU) 2015/2366 — Zahlungsdiensterichtlinie",
|
|
"doc_type": "eu_directive",
|
|
"description": "Reguliert Zahlungsdienste im EU-Binnenmarkt. Fuehrt Open Banking ein, verpflichtet zu starker Kundenauthentifizierung (SCA) und ermoeglicht Drittanbieterzugang zu Bankkonten.",
|
|
"industries": [],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"effective_date": "13. Januar 2018",
|
|
"sort_order": 11,
|
|
"applicability_note": "Nicht zutreffend fuer produzierende Industrie. PSD2 reguliert Zahlungsdienste und Open Banking im Finanzsektor."
|
|
},
|
|
{
|
|
"code": "UNLAUTERE_PRAKTIKEN_RL",
|
|
"name": "UGP-Richtlinie",
|
|
"full_name": "Richtlinie 2005/29/EG — Unlautere Geschaeftspraktiken",
|
|
"doc_type": "eu_directive",
|
|
"industries": [
|
|
"handel"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"sort_order": 12
|
|
},
|
|
{
|
|
"code": "VERBRAUCHERRECHTE_RL",
|
|
"name": "Verbraucherrechte-Richtlinie",
|
|
"full_name": "Richtlinie 2011/83/EU ueber die Rechte der Verbraucher",
|
|
"doc_type": "eu_directive",
|
|
"description": "EU-weite Harmonisierung der Verbraucherrechte bei Fernabsatz und aussergeschaeftlichen Vertraegen. 14-Tage-Widerrufsrecht, Informationspflichten, digitale Inhalte.",
|
|
"industries": [
|
|
"handel",
|
|
"konsumgueter"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"effective_date": "13. Juni 2014",
|
|
"sort_order": 13,
|
|
"applicability_note": "Sektorspezifisch: Handel, Konsumgueter. Verbraucherrechte bei Fernabsatz und Widerrufsrecht."
|
|
},
|
|
{
|
|
"code": "WARENKAUF_RL",
|
|
"name": "Warenkauf-Richtlinie",
|
|
"full_name": "Richtlinie (EU) 2019/771 — Warenkauf-Richtlinie",
|
|
"doc_type": "eu_directive",
|
|
"industries": [
|
|
"handel",
|
|
"konsumgueter"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"sort_order": 14
|
|
},
|
|
{
|
|
"code": "BLUE_GUIDE",
|
|
"name": "Blue Guide",
|
|
"full_name": "Leitfaden fuer die Umsetzung der EU-Produktvorschriften (Blue Guide 2022)",
|
|
"doc_type": "eu_guidance",
|
|
"description": "Umfassender Leitfaden der EU-Kommission zur Umsetzung von Produktvorschriften. Erklaert CE-Kennzeichnung, Konformitaetsbewertungsverfahren, notifizierte Stellen, Marktaufsicht und den New Legislative Framework.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"effective_date": "29. Juni 2022",
|
|
"sort_order": 1,
|
|
"applicability_note": "Gilt fuer alle produzierenden Branchen. Der Blue Guide erklaert CE-Kennzeichnung und Konformitaetsbewertung fuer alle regulierten Produkte."
|
|
},
|
|
{
|
|
"code": "EFRAG_ENDORSEMENT",
|
|
"name": "EFRAG Endorsement Status",
|
|
"full_name": "EFRAG EU Endorsement Status Report (Dezember 2025)",
|
|
"doc_type": "eu_guidance",
|
|
"description": "Uebersicht des European Financial Reporting Advisory Group (EFRAG) ueber den EU-Endorsement-Stand aller IFRS/IAS-Standards.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"effective_date": "18. Dezember 2025",
|
|
"sort_order": 2,
|
|
"applicability_note": "Gilt fuer alle Branchen. EFRAG-Endorsement-Status ist fuer alle Unternehmen relevant die IFRS anwenden."
|
|
},
|
|
{
|
|
"code": "GPAI_COP_COPYRIGHT",
|
|
"name": "GPAI Code of Practice Copyright",
|
|
"full_name": "GPAI Code of Practice Copyright",
|
|
"doc_type": "eu_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"sort_order": 3
|
|
},
|
|
{
|
|
"code": "GPAI_COP_SAFETY",
|
|
"name": "GPAI Code of Practice Safety",
|
|
"full_name": "GPAI Code of Practice Safety and Security",
|
|
"doc_type": "eu_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"sort_order": 4
|
|
},
|
|
{
|
|
"code": "GPAI_COP_TRANSPARENCY",
|
|
"name": "GPAI Code of Practice Transparency",
|
|
"full_name": "GPAI Code of Practice Transparency",
|
|
"doc_type": "eu_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"sort_order": 5
|
|
},
|
|
{
|
|
"code": "GPAI_COMMUNICATION",
|
|
"name": "GPAI Communication",
|
|
"full_name": "EU-Kommission Genehmigung GPAI Guidelines",
|
|
"doc_type": "eu_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"sort_order": 6
|
|
},
|
|
{
|
|
"code": "GPAI_SCOPE_GUIDELINES",
|
|
"name": "GPAI Scope Guidelines",
|
|
"full_name": "GPAI Scope Guidelines",
|
|
"doc_type": "eu_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"sort_order": 7
|
|
},
|
|
{
|
|
"code": "HLEG_AI",
|
|
"name": "HLEG Ethik-Leitlinien KI",
|
|
"full_name": "HLEG Ethik-Leitlinien fuer vertrauenswuerdige KI",
|
|
"doc_type": "eu_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 8
|
|
},
|
|
{
|
|
"code": "MACHINERY_GUIDE",
|
|
"name": "Leitfaden Maschinenrichtlinie",
|
|
"full_name": "Leitfaden Maschinenrichtlinie 2006/42/EG (2. Auflage)",
|
|
"doc_type": "eu_guidance",
|
|
"industries": [
|
|
"maschinenbau",
|
|
"automotive",
|
|
"elektrotechnik",
|
|
"metall"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"sort_order": 9,
|
|
"applicability_note": "Sektorspezifisch: Maschinenbau, Automotive, Elektrotechnik, Metall. Leitfaden zur Maschinenrichtlinie fuer Maschinenhersteller."
|
|
},
|
|
{
|
|
"code": "BDSG_FULL",
|
|
"name": "BDSG",
|
|
"full_name": "Bundesdatenschutzgesetz (BDSG 2018)",
|
|
"doc_type": "de_law",
|
|
"description": "Deutsches Bundesdatenschutzgesetz als nationale Ergaenzung zur DSGVO. Regelt Beschaeftigtendatenschutz, Videoueberachung, Scoring und Datenschutzbeauftragte.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "25. Mai 2018",
|
|
"sort_order": 1,
|
|
"applicability_note": "Gilt fuer alle Branchen. Das BDSG ergaenzt die DSGVO mit nationalen Regelungen zu Beschaeftigtendatenschutz und Videoueberachung."
|
|
},
|
|
{
|
|
"code": "DE_AGG",
|
|
"name": "AGG",
|
|
"full_name": "Allgemeines Gleichbehandlungsgesetz (AGG)",
|
|
"doc_type": "de_law",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"sort_order": 2
|
|
},
|
|
{
|
|
"code": "DE_AO_RET",
|
|
"name": "AO Aufbewahrung",
|
|
"full_name": "Abgabenordnung (AO) §§140-148 — Steuerliche Aufbewahrungspflichten",
|
|
"doc_type": "de_law",
|
|
"description": "Steuerliche Buchfuehrungs- und Aufbewahrungspflichten. 6/10 Jahre Fristen, Datenzugriff durch Finanzbehoerden (§147 Abs. 6).",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "Dauerhaft gueltig",
|
|
"sort_order": 3,
|
|
"applicability_note": "Gilt fuer alle Branchen. Steuerliche Aufbewahrungspflichten gelten fuer jedes steuerpflichtige Unternehmen."
|
|
},
|
|
{
|
|
"code": "DE_ARBSCHG",
|
|
"name": "ArbSchG",
|
|
"full_name": "Arbeitsschutzgesetz (ArbSchG)",
|
|
"doc_type": "de_law",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"sort_order": 4
|
|
},
|
|
{
|
|
"code": "DE_BATTDG",
|
|
"name": "BattDG",
|
|
"full_name": "Batteriegesetz (BattDG)",
|
|
"doc_type": "de_law",
|
|
"industries": [
|
|
"automotive",
|
|
"elektrotechnik",
|
|
"energie"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"sort_order": 5,
|
|
"applicability_note": "Sektorspezifisch: Automotive, Elektrotechnik, Energie. Batteriegesetz betrifft Hersteller und Inverkehrbringer von Batterien."
|
|
},
|
|
{
|
|
"code": "DE_BETRVG",
|
|
"name": "BetrVG",
|
|
"full_name": "Betriebsverfassungsgesetz §87 Abs.1 Nr.6",
|
|
"doc_type": "de_law",
|
|
"description": "Mitbestimmung des Betriebsrats bei technischer Ueberwachung: IT-Systeme die Arbeitnehmerverhalten ueberwachen koennen.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "1972 (laufend aktualisiert)",
|
|
"sort_order": 6,
|
|
"applicability_note": "Gilt fuer alle Branchen. Betriebsratsmitbestimmung bei IT-Systemen betrifft jeden Betrieb mit Betriebsrat — branchenunabhaengig."
|
|
},
|
|
{
|
|
"code": "DE_BFSG",
|
|
"name": "BFSG",
|
|
"full_name": "Barrierefreiheitsstaerkungsgesetz (BFSG)",
|
|
"doc_type": "de_law",
|
|
"industries": [
|
|
"handel",
|
|
"konsumgueter",
|
|
"elektrotechnik",
|
|
"automotive"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"sort_order": 7,
|
|
"applicability_note": "Sektorspezifisch: Handel, Konsumgueter, Elektrotechnik, Automotive. Deutsches Umsetzungsgesetz des EAA — betrifft Produkte mit digitalen Interfaces."
|
|
},
|
|
{
|
|
"code": "DE_BGB_AGB",
|
|
"name": "BGB AGB-Recht",
|
|
"full_name": "BGB §§305-310, 312-312k — AGB und Fernabsatz",
|
|
"doc_type": "de_law",
|
|
"description": "Deutsches AGB-Recht: Einbeziehungskontrolle (§305), Inhaltskontrolle (§307), Klauselverbote (§§308-309). Fernabsatz: Widerrufsrecht, Button-Loesung.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "Dauerhaft gueltig",
|
|
"sort_order": 8,
|
|
"applicability_note": "Gilt fuer alle Branchen. AGB-Recht und Fernabsatzrecht betreffen alle Unternehmen die Vertraege mit Kunden schliessen."
|
|
},
|
|
{
|
|
"code": "DE_BGB_ARBEITSRECHT",
|
|
"name": "BGB Arbeitsvertragsrecht",
|
|
"full_name": "BGB Arbeitsvertragsrecht (§§ 611a-630)",
|
|
"doc_type": "de_law",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"sort_order": 9
|
|
},
|
|
{
|
|
"code": "DE_BSIG",
|
|
"name": "BSI-Gesetz",
|
|
"full_name": "Gesetz ueber das Bundesamt fuer Sicherheit in der Informationstechnik (BSIG 2025)",
|
|
"doc_type": "de_law",
|
|
"description": "BSI-Aufgaben, KRITIS-Meldepflichten, IT-Sicherheitsstandards, Zertifizierung, Warn- und Empfehlungsbefugnis.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "2009 (laufend aktualisiert)",
|
|
"sort_order": 10,
|
|
"applicability_note": "Gilt fuer alle Branchen. BSI-Gesetz definiert IT-Sicherheitsstandards und Meldepflichten die alle Unternehmen betreffen koennen."
|
|
},
|
|
{
|
|
"code": "DE_BSI_KRITISV",
|
|
"name": "BSI-KritisV",
|
|
"full_name": "BSI-Kritisverordnung (BSI-KritisV)",
|
|
"doc_type": "de_law",
|
|
"industries": [
|
|
"energie",
|
|
"transport",
|
|
"chemie"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"sort_order": 11
|
|
},
|
|
{
|
|
"code": "DE_DDG",
|
|
"name": "Digitale-Dienste-Gesetz",
|
|
"full_name": "Digitale-Dienste-Gesetz (DDG)",
|
|
"doc_type": "de_law",
|
|
"description": "Deutsches Umsetzungsgesetz zum DSA. Regelt Impressumspflicht (§5 DDG), Informationspflichten fuer digitale Dienste und Cookie-Consent.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "14. Mai 2024",
|
|
"sort_order": 12,
|
|
"applicability_note": "Gilt fuer alle Branchen. Impressumspflicht und Informationspflichten fuer digitale Dienste betreffen jedes Unternehmen mit Online-Praesenz."
|
|
},
|
|
{
|
|
"code": "DE_DLINFOV",
|
|
"name": "DL-InfoV",
|
|
"full_name": "Dienstleistungs-Informationspflichten-Verordnung",
|
|
"doc_type": "de_law",
|
|
"description": "Informationspflichten fuer Dienstleister: Identitaet, Kontakt, Berufshaftpflicht, AGB-Zugang.",
|
|
"industries": [
|
|
"handel"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "17. Mai 2010",
|
|
"sort_order": 13,
|
|
"applicability_note": "Sektorspezifisch: Handel. Informationspflichten fuer Dienstleister im Geschaeftsverkehr."
|
|
},
|
|
{
|
|
"code": "DE_EGBGB",
|
|
"name": "EGBGB Art. 246-248",
|
|
"full_name": "EGBGB — Informationspflichten bei Verbrauchervertraegen",
|
|
"doc_type": "de_law",
|
|
"description": "Detaillierte Informationspflichten bei Verbrauchervertraegen (Art. 246), Fernabsatz (Art. 246a) und E-Commerce (Art. 246c).",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "Dauerhaft gueltig",
|
|
"sort_order": 14,
|
|
"applicability_note": "Gilt fuer alle Branchen. Informationspflichten bei Verbrauchervertraegen betreffen alle Unternehmen mit B2C-Geschaeft."
|
|
},
|
|
{
|
|
"code": "DE_ELEKTROG",
|
|
"name": "ElektroG",
|
|
"full_name": "Elektro- und Elektronikgeraetegesetz (ElektroG)",
|
|
"doc_type": "de_law",
|
|
"industries": [
|
|
"elektrotechnik",
|
|
"automotive",
|
|
"konsumgueter"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"sort_order": 15,
|
|
"applicability_note": "Sektorspezifisch: Elektrotechnik, Automotive, Konsumgueter. Entsorgungspflichten fuer Hersteller von Elektro- und Elektronikgeraeten."
|
|
},
|
|
{
|
|
"code": "DE_GESCHGEHG",
|
|
"name": "GeschGehG",
|
|
"full_name": "Gesetz zum Schutz von Geschaeftsgeheimnissen",
|
|
"doc_type": "de_law",
|
|
"description": "Schutz von Geschaeftsgeheimnissen: Definition, angemessene Geheimhaltungsmassnahmen erforderlich, Reverse Engineering erlaubt.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "26. April 2019",
|
|
"sort_order": 16,
|
|
"applicability_note": "Gilt fuer alle Branchen. Schutz von Geschaeftsgeheimnissen ist fuer jedes Unternehmen relevant."
|
|
},
|
|
{
|
|
"code": "DE_GEWO",
|
|
"name": "GewO",
|
|
"full_name": "Gewerbeordnung (GewO)",
|
|
"doc_type": "de_law",
|
|
"industries": [
|
|
"handel"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"sort_order": 17
|
|
},
|
|
{
|
|
"code": "DE_GWG",
|
|
"name": "GwG",
|
|
"full_name": "Geldwaeschegesetz (GwG)",
|
|
"doc_type": "de_law",
|
|
"industries": [],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"sort_order": 18
|
|
},
|
|
{
|
|
"code": "DE_HGB_RET",
|
|
"name": "HGB Aufbewahrung",
|
|
"full_name": "HGB §§238-261, 257 — Handelsbuecher und Aufbewahrungsfristen",
|
|
"doc_type": "de_law",
|
|
"description": "Buchfuehrungspflicht und handelsrechtliche Aufbewahrungsfristen: 6 Jahre (Handelsbriefe) und 10 Jahre (Buchungsbelege, Jahresabschluesse).",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "Dauerhaft gueltig",
|
|
"sort_order": 19,
|
|
"applicability_note": "Gilt fuer alle Branchen. Handelsrechtliche Buchfuehrungs- und Aufbewahrungspflichten betreffen jeden Kaufmann."
|
|
},
|
|
{
|
|
"code": "DE_HINSCHG",
|
|
"name": "HinSchG",
|
|
"full_name": "Hinweisgeberschutzgesetz (HinSchG)",
|
|
"doc_type": "de_law",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"sort_order": 20
|
|
},
|
|
{
|
|
"code": "DE_KRITISDACHG",
|
|
"name": "KRITIS-Dachgesetz",
|
|
"full_name": "KRITIS-Dachgesetz",
|
|
"doc_type": "de_law",
|
|
"industries": [
|
|
"energie",
|
|
"transport",
|
|
"chemie"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"sort_order": 21
|
|
},
|
|
{
|
|
"code": "DE_KSCHG",
|
|
"name": "KSchG",
|
|
"full_name": "Kuendigungsschutzgesetz (KSchG)",
|
|
"doc_type": "de_law",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"sort_order": 22
|
|
},
|
|
{
|
|
"code": "DE_LKSG",
|
|
"name": "LkSG",
|
|
"full_name": "Lieferkettensorgfaltspflichtengesetz (LkSG)",
|
|
"doc_type": "de_law",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"sort_order": 23
|
|
},
|
|
{
|
|
"code": "DE_MSTV",
|
|
"name": "MStV",
|
|
"full_name": "Medienstaatsvertrag (MStV)",
|
|
"doc_type": "de_law",
|
|
"industries": [
|
|
"handel"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"sort_order": 24
|
|
},
|
|
{
|
|
"code": "DE_PANGV",
|
|
"name": "PAngV",
|
|
"full_name": "Preisangabenverordnung (PAngV 2022)",
|
|
"doc_type": "de_law",
|
|
"description": "Preisangaben: Gesamtpreis, Grundpreis, Streichpreise (§11 — 30-Tage-Regel), Online-Preisauszeichnung.",
|
|
"industries": [
|
|
"handel",
|
|
"konsumgueter"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "28. Mai 2022",
|
|
"sort_order": 25,
|
|
"applicability_note": "Sektorspezifisch: Handel, Konsumgueter. Preisangabenpflichten fuer den Einzelhandel und Online-Handel."
|
|
},
|
|
{
|
|
"code": "DE_PRODHAFTG",
|
|
"name": "ProdHaftG",
|
|
"full_name": "Produkthaftungsgesetz (ProdHaftG)",
|
|
"doc_type": "de_law",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"sort_order": 26,
|
|
"applicability_note": "Gilt fuer alle produzierenden Branchen. Produkthaftung betrifft jeden Hersteller von Produkten einschliesslich Software."
|
|
},
|
|
{
|
|
"code": "TDDDG",
|
|
"name": "TDDDG",
|
|
"full_name": "Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz",
|
|
"doc_type": "de_law",
|
|
"description": "Deutsches Umsetzungsgesetz der ePrivacy-Richtlinie. Regelt den Datenschutz bei Telemedien und Telekommunikation. Enthaelt die strengen deutschen Cookie-Consent-Anforderungen.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "1. Dezember 2021",
|
|
"sort_order": 27,
|
|
"applicability_note": "Gilt fuer alle Branchen. Regelt Cookie-Consent und Datenschutz bei Telemedien fuer jedes Unternehmen mit Online-Praesenz."
|
|
},
|
|
{
|
|
"code": "DE_TKG",
|
|
"name": "TKG 2021",
|
|
"full_name": "Telekommunikationsgesetz 2021",
|
|
"doc_type": "de_law",
|
|
"description": "Telekommunikationsregulierung: Kundenschutz, Datenschutz, Vertragslaufzeiten max. 24 Monate, Netzinfrastruktur.",
|
|
"industries": [
|
|
"elektrotechnik",
|
|
"transport"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "1. Dezember 2021",
|
|
"sort_order": 28,
|
|
"applicability_note": "Sektorspezifisch: Elektrotechnik, Transport. Telekommunikationsregulierung fuer Unternehmen mit TK-Diensten oder vernetzten Produkten."
|
|
},
|
|
{
|
|
"code": "TMG_KOMPLETT",
|
|
"name": "TMG",
|
|
"full_name": "Telemediengesetz (TMG komplett)",
|
|
"doc_type": "de_law",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"sort_order": 29
|
|
},
|
|
{
|
|
"code": "DE_TZBFG",
|
|
"name": "TzBfG",
|
|
"full_name": "Teilzeit- und Befristungsgesetz (TzBfG)",
|
|
"doc_type": "de_law",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"sort_order": 30
|
|
},
|
|
{
|
|
"code": "DE_URHG",
|
|
"name": "UrhG",
|
|
"full_name": "Urheberrechtsgesetz (UrhG komplett)",
|
|
"doc_type": "de_law",
|
|
"industries": [
|
|
"elektrotechnik",
|
|
"konsumgueter"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"sort_order": 31
|
|
},
|
|
{
|
|
"code": "DE_USTG_RET",
|
|
"name": "UStG §14b",
|
|
"full_name": "Umsatzsteuergesetz §14b — Aufbewahrung von Rechnungen",
|
|
"doc_type": "de_law",
|
|
"description": "Aufbewahrungspflicht fuer Rechnungen: 10 Jahre, Grundstuecke 20 Jahre, elektronische Aufbewahrung.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "Dauerhaft gueltig",
|
|
"sort_order": 32,
|
|
"applicability_note": "Gilt fuer alle Branchen. Rechnungsaufbewahrungspflicht gilt fuer jedes umsatzsteuerpflichtige Unternehmen."
|
|
},
|
|
{
|
|
"code": "DE_UWG",
|
|
"name": "UWG Deutschland",
|
|
"full_name": "Gesetz gegen den unlauteren Wettbewerb (UWG)",
|
|
"doc_type": "de_law",
|
|
"description": "Schutz vor unlauterem Wettbewerb: irrefuehrende Werbung, Spam-Verbot, Preisangaben, Online-Marketing-Regeln.",
|
|
"industries": [
|
|
"handel",
|
|
"konsumgueter"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "2004 (laufend aktualisiert)",
|
|
"sort_order": 33,
|
|
"applicability_note": "Sektorspezifisch: Handel, Konsumgueter. Wettbewerbsrecht und Werberegelungen fuer B2C-Unternehmen."
|
|
},
|
|
{
|
|
"code": "DE_VERPACKG",
|
|
"name": "VerpackG",
|
|
"full_name": "Verpackungsgesetz (VerpackG)",
|
|
"doc_type": "de_law",
|
|
"industries": [
|
|
"konsumgueter",
|
|
"handel",
|
|
"chemie"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"sort_order": 34,
|
|
"applicability_note": "Sektorspezifisch: Konsumgueter, Handel, Chemie. Verpackungspflichten fuer Hersteller und Vertreiber verpackter Waren."
|
|
},
|
|
{
|
|
"code": "DE_VSBG",
|
|
"name": "VSBG",
|
|
"full_name": "Verbraucherstreitbeilegungsgesetz (VSBG)",
|
|
"doc_type": "de_law",
|
|
"industries": [
|
|
"handel",
|
|
"konsumgueter"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"sort_order": 35
|
|
},
|
|
{
|
|
"code": "AT_ABGB_AGB",
|
|
"name": "ABGB AGB-Recht AT",
|
|
"full_name": "ABGB §§861-879, 864a — AGB-Kontrolle Oesterreich",
|
|
"doc_type": "at_law",
|
|
"description": "Geltungskontrolle (§864a — ueberraschende Klauseln), Sittenwidrigkeitskontrolle (§879 Abs.3 — groebliche Benachteiligung).",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "1. Juni 1811 (laufend aktualisiert)",
|
|
"sort_order": 1,
|
|
"applicability_note": "Gilt fuer alle Branchen. Oesterreichisches AGB-Recht betrifft alle Unternehmen die Vertraege mit Kunden schliessen."
|
|
},
|
|
{
|
|
"code": "AT_BAO_RET",
|
|
"name": "BAO §132 AT",
|
|
"full_name": "Bundesabgabenordnung §132 — Aufbewahrung Oesterreich",
|
|
"doc_type": "at_law",
|
|
"description": "Steuerliche Aufbewahrungspflicht 7 Jahre fuer Buecher, Aufzeichnungen und Belege. Grundstuecke 22 Jahre.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "Dauerhaft gueltig",
|
|
"sort_order": 2,
|
|
"applicability_note": "Gilt fuer alle Branchen. Steuerliche Aufbewahrungspflicht gilt fuer jedes oesterreichische Unternehmen."
|
|
},
|
|
{
|
|
"code": "AT_DSG",
|
|
"name": "DSG Oesterreich",
|
|
"full_name": "Datenschutzgesetz Oesterreich (DSG)",
|
|
"doc_type": "at_law",
|
|
"description": "Oesterreichisches Datenschutzgesetz zur Ergaenzung der DSGVO. Regelt nationale Besonderheiten wie Bildverarbeitung, Datenschutzbehoerde und Strafbestimmungen.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "25. Mai 2018",
|
|
"sort_order": 3,
|
|
"applicability_note": "Gilt fuer alle Branchen. Oesterreichisches Datenschutzgesetz ergaenzt die DSGVO mit nationalen Besonderheiten."
|
|
},
|
|
{
|
|
"code": "AT_ECG",
|
|
"name": "E-Commerce-Gesetz AT",
|
|
"full_name": "E-Commerce-Gesetz (ECG) Oesterreich",
|
|
"doc_type": "at_law",
|
|
"description": "Oesterreichisches E-Commerce-Gesetz: Impressum/Offenlegungspflicht (§5), Informationspflichten, Haftung von Diensteanbietern.",
|
|
"industries": [
|
|
"elektrotechnik",
|
|
"transport"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "1. Januar 2002",
|
|
"sort_order": 4,
|
|
"applicability_note": "Sektorspezifisch: Elektrotechnik, Transport. Oesterreichisches E-Commerce-Gesetz fuer Online-Dienste."
|
|
},
|
|
{
|
|
"code": "AT_FAGG",
|
|
"name": "FAGG Oesterreich",
|
|
"full_name": "Fern- und Auswaertsgeschaefte-Gesetz (FAGG) Oesterreich",
|
|
"doc_type": "at_law",
|
|
"description": "Fernabsatzrecht: Informationspflichten, Widerrufsrecht 14 Tage, Button-Loesung, Ausnahmen.",
|
|
"industries": [
|
|
"handel",
|
|
"konsumgueter"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "13. Juni 2014",
|
|
"sort_order": 5,
|
|
"applicability_note": "Sektorspezifisch: Handel, Konsumgueter. Fernabsatzrecht fuer Online-Handel in Oesterreich."
|
|
},
|
|
{
|
|
"code": "AT_KSCHG",
|
|
"name": "KSchG Oesterreich",
|
|
"full_name": "Konsumentenschutzgesetz (KSchG) Oesterreich",
|
|
"doc_type": "at_law",
|
|
"description": "Konsumentenschutz: AGB-Kontrolle (§6 Klauselverbote, §9 Verbandsklage), Ruecktrittsrecht bei Haustuergeschaeften.",
|
|
"industries": [
|
|
"handel",
|
|
"konsumgueter"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "1. Oktober 1979 (laufend aktualisiert)",
|
|
"sort_order": 6,
|
|
"applicability_note": "Sektorspezifisch: Handel, Konsumgueter. Oesterreichischer Konsumentenschutz fuer B2C-Geschaefte."
|
|
},
|
|
{
|
|
"code": "AT_MEDIENG",
|
|
"name": "MedienG §§24-25 AT",
|
|
"full_name": "Mediengesetz §§24-25 Oesterreich — Impressum und Offenlegung",
|
|
"doc_type": "at_law",
|
|
"description": "Impressum/Offenlegungspflicht fuer periodische Medien und Websites in Oesterreich.",
|
|
"industries": [
|
|
"handel"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "1. Januar 1982 (laufend aktualisiert)",
|
|
"sort_order": 7,
|
|
"applicability_note": "Sektorspezifisch: Handel. Oesterreichische Impressumspflicht fuer Medien und Websites."
|
|
},
|
|
{
|
|
"code": "AT_TKG",
|
|
"name": "TKG 2021 AT",
|
|
"full_name": "Telekommunikationsgesetz 2021 Oesterreich",
|
|
"doc_type": "at_law",
|
|
"description": "Oesterreichisches TKG: Cookie-Bestimmungen (§165), Kommunikationsgeheimnis, Endgeraetezugriff, Spam-Verbot.",
|
|
"industries": [
|
|
"elektrotechnik",
|
|
"transport"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "1. November 2021",
|
|
"sort_order": 8,
|
|
"applicability_note": "Sektorspezifisch: Elektrotechnik, Transport. Oesterreichische Telekommunikationsregulierung."
|
|
},
|
|
{
|
|
"code": "AT_UGB_RET",
|
|
"name": "UGB Aufbewahrung AT",
|
|
"full_name": "UGB §§189-216, 212 — Rechnungslegung und Aufbewahrung Oesterreich",
|
|
"doc_type": "at_law",
|
|
"description": "Oesterreichische Rechnungslegungspflicht und Aufbewahrungsfristen (7 Jahre). Buchfuehrung, Jahresabschluss.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "Dauerhaft gueltig",
|
|
"sort_order": 9,
|
|
"applicability_note": "Gilt fuer alle Branchen. Oesterreichische Rechnungslegungspflicht und Aufbewahrungsfristen gelten fuer alle Unternehmer."
|
|
},
|
|
{
|
|
"code": "AT_UWG",
|
|
"name": "UWG Oesterreich",
|
|
"full_name": "Bundesgesetz gegen den unlauteren Wettbewerb Oesterreich",
|
|
"doc_type": "at_law",
|
|
"description": "Lauterkeitsrecht AT: irrefuehrende Geschaeftspraktiken, aggressive Praktiken, Preisauszeichnung.",
|
|
"industries": [
|
|
"handel",
|
|
"konsumgueter"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "1984 (laufend aktualisiert)",
|
|
"sort_order": 10,
|
|
"applicability_note": "Sektorspezifisch: Handel, Konsumgueter. Oesterreichisches Lauterkeitsrecht fuer B2C-Unternehmen."
|
|
},
|
|
{
|
|
"code": "CH_DSG",
|
|
"name": "DSG Schweiz",
|
|
"full_name": "Datenschutzgesetz Schweiz (revDSG 2023)",
|
|
"doc_type": "ch_law",
|
|
"description": "Revidiertes Schweizer Datenschutzgesetz mit DSGVO-nahen Anforderungen. Gilt fuer Schweizer Unternehmen und solche, die Schweizer Daten verarbeiten.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "1. September 2023",
|
|
"sort_order": 1,
|
|
"applicability_note": "Gilt fuer alle Branchen. Revidiertes Schweizer Datenschutzgesetz mit DSGVO-nahen Anforderungen fuer Schweizer Unternehmen."
|
|
},
|
|
{
|
|
"code": "CH_DSV",
|
|
"name": "DSV Schweiz",
|
|
"full_name": "Datenschutzverordnung (DSV) Schweiz — SR 235.11",
|
|
"doc_type": "ch_law",
|
|
"description": "Ausfuehrungsverordnung zum revDSG: Meldepflichten, DSFA-Verfahren, Auslandtransfers, technische Massnahmen.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "1. September 2023",
|
|
"sort_order": 2,
|
|
"applicability_note": "Gilt fuer alle Branchen. Ausfuehrungsverordnung zum Schweizer Datenschutzgesetz."
|
|
},
|
|
{
|
|
"code": "CH_FMG",
|
|
"name": "FMG Schweiz",
|
|
"full_name": "Fernmeldegesetz Schweiz (SR 784.10)",
|
|
"doc_type": "ch_law",
|
|
"description": "Telekommunikationsregulierung: Fernmeldegeheimnis, Cookies/Tracking (Art. 45c), Spam-Verbot, Datenschutz.",
|
|
"industries": [
|
|
"elektrotechnik",
|
|
"transport"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "1. April 2007 (laufend aktualisiert)",
|
|
"sort_order": 3,
|
|
"applicability_note": "Sektorspezifisch: Elektrotechnik, Transport. Schweizer Telekommunikationsregulierung."
|
|
},
|
|
{
|
|
"code": "CH_GEBUV",
|
|
"name": "GeBuV Schweiz",
|
|
"full_name": "Geschaeftsbuecher-Verordnung Schweiz (SR 221.431)",
|
|
"doc_type": "ch_law",
|
|
"description": "Ausfuehrungsvorschriften zur Buchfuehrung: elektronische Aufbewahrung, Integritaet, Datentraeger.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "1. Juni 2002",
|
|
"sort_order": 4,
|
|
"applicability_note": "Gilt fuer alle Branchen. Schweizer Ausfuehrungsvorschriften zur Buchfuehrung gelten fuer alle Unternehmen."
|
|
},
|
|
{
|
|
"code": "CH_OR_AGB",
|
|
"name": "OR AGB/Aufbewahrung CH",
|
|
"full_name": "Obligationenrecht — AGB-Kontrolle und Aufbewahrung Schweiz (SR 220)",
|
|
"doc_type": "ch_law",
|
|
"description": "Art. 8 OR (AGB-Inhaltskontrolle), Art. 19/20 (Vertragsfreiheit), Art. 957-958f (Buchfuehrung, 10 Jahre Aufbewahrung).",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "1. Januar 2023 (AGB-Revision)",
|
|
"sort_order": 5,
|
|
"applicability_note": "Gilt fuer alle Branchen. Schweizer AGB-Recht und Aufbewahrungspflichten betreffen alle Unternehmen."
|
|
},
|
|
{
|
|
"code": "CH_UWG",
|
|
"name": "UWG Schweiz",
|
|
"full_name": "Bundesgesetz gegen den unlauteren Wettbewerb Schweiz (SR 241)",
|
|
"doc_type": "ch_law",
|
|
"description": "Lauterkeitsrecht: Impressumspflicht, irrefuehrende Werbung, aggressive Verkaufsmethoden, AGB-Transparenz.",
|
|
"industries": [
|
|
"handel",
|
|
"konsumgueter"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "1. Maerz 1988 (laufend aktualisiert)",
|
|
"sort_order": 6,
|
|
"applicability_note": "Sektorspezifisch: Handel, Konsumgueter. Schweizer Lauterkeitsrecht fuer B2C-Unternehmen."
|
|
},
|
|
{
|
|
"code": "CH_ZERTES",
|
|
"name": "ZertES Schweiz",
|
|
"full_name": "Bundesgesetz ueber die elektronische Signatur (SR 943.03)",
|
|
"doc_type": "ch_law",
|
|
"description": "Elektronische Signatur und Zertifizierung: Qualifizierte Signaturen, Zertifizierungsdiensteanbieter.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "1. Januar 2017",
|
|
"sort_order": 7,
|
|
"applicability_note": "Gilt fuer alle Branchen. Elektronische Signatur ist branchenuebergreifend relevant."
|
|
},
|
|
{
|
|
"code": "CH_ZGB_PERS",
|
|
"name": "ZGB Persoenlichkeitsschutz CH",
|
|
"full_name": "Zivilgesetzbuch Art. 28-28l — Persoenlichkeitsschutz Schweiz (SR 210)",
|
|
"doc_type": "ch_law",
|
|
"description": "Persoenlichkeitsschutz: Recht am eigenen Bild, Schutz der Privatsphaere, Gegendarstellungsrecht.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "1. Juli 1985 (laufend aktualisiert)",
|
|
"sort_order": 8,
|
|
"applicability_note": "Gilt fuer alle Branchen. Persoenlichkeitsschutz betrifft alle Unternehmen die personenbezogene Daten verarbeiten."
|
|
},
|
|
{
|
|
"code": "BE_DPA_LAW",
|
|
"name": "Datenschutzgesetz Belgien",
|
|
"full_name": "Loi relative a la protection des donnees (Belgien)",
|
|
"doc_type": "national_law",
|
|
"description": "Belgisches Datenschutzgesetz zur nationalen Umsetzung der DSGVO. Regelt die Autorite de protection des donnees (APD).",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "2018",
|
|
"sort_order": 1,
|
|
"applicability_note": "Gilt fuer alle Branchen. Nationales Datenschutzgesetz als Ergaenzung zur DSGVO — betrifft alle Unternehmen mit Bezug zu Belgien."
|
|
},
|
|
{
|
|
"code": "CZ_ZOU",
|
|
"name": "Zakon Tschechien",
|
|
"full_name": "Zakon o zpracovani osobnich udaju (Tschechien)",
|
|
"doc_type": "national_law",
|
|
"description": "Tschechisches Datenschutzgesetz zur DSGVO-Umsetzung. Reguliert durch das UOOU.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "24. April 2019",
|
|
"sort_order": 2,
|
|
"applicability_note": "Gilt fuer alle Branchen. Nationales Datenschutzgesetz als Ergaenzung zur DSGVO — betrifft alle Unternehmen mit Bezug zu Tschechien."
|
|
},
|
|
{
|
|
"code": "DK_DATABESKYTTELSESLOVEN",
|
|
"name": "Databeskyttelsesloven DK",
|
|
"full_name": "Databeskyttelsesloven — Datenschutzgesetz Daenemark",
|
|
"doc_type": "national_law",
|
|
"description": "Daenisches Datenschutzgesetz als ergaenzende Bestimmungen zur DSGVO. Reguliert durch Datatilsynet.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "25. Mai 2018",
|
|
"sort_order": 3,
|
|
"applicability_note": "Gilt fuer alle Branchen. Nationales Datenschutzgesetz als Ergaenzung zur DSGVO — betrifft alle Unternehmen mit Bezug zu Daenemark."
|
|
},
|
|
{
|
|
"code": "ES_LOPDGDD",
|
|
"name": "LOPDGDD Spanien",
|
|
"full_name": "Ley Organica de Proteccion de Datos (LOPDGDD) Spanien",
|
|
"doc_type": "national_law",
|
|
"description": "Spanisches organisches Datenschutzgesetz mit Garantien digitaler Rechte. Umfassende DSGVO-Umsetzung mit digitalen Grundrechten.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "7. Dezember 2018",
|
|
"sort_order": 4,
|
|
"applicability_note": "Gilt fuer alle Branchen. Nationales Datenschutzgesetz als Ergaenzung zur DSGVO — betrifft alle Unternehmen mit Bezug zu Spanien."
|
|
},
|
|
{
|
|
"code": "FI_TIETOSUOJALAKI",
|
|
"name": "Tietosuojalaki Finnland",
|
|
"full_name": "Tietosuojalaki (1050/2018) Finnland",
|
|
"doc_type": "national_law",
|
|
"description": "Finnisches Datenschutzgesetz als nationale Ergaenzung zur DSGVO.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "1. Januar 2019",
|
|
"sort_order": 5,
|
|
"applicability_note": "Gilt fuer alle Branchen. Nationales Datenschutzgesetz als Ergaenzung zur DSGVO — betrifft alle Unternehmen mit Bezug zu Finnland."
|
|
},
|
|
{
|
|
"code": "FR_CNIL_GUIDE",
|
|
"name": "CNIL Guide RGPD",
|
|
"full_name": "Guide pratique RGPD (CNIL Frankreich)",
|
|
"doc_type": "national_law",
|
|
"description": "Praktischer DSGVO-Leitfaden der franzoesischen Datenschutzbehoerde CNIL. Wichtig fuer alle Unternehmen mit franzoesischen Kunden.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "2018",
|
|
"sort_order": 6,
|
|
"applicability_note": "Gilt fuer alle Branchen. CNIL-Leitfaden zur DSGVO-Umsetzung — relevant fuer alle Unternehmen mit franzoesischen Kunden."
|
|
},
|
|
{
|
|
"code": "HU_INFOTV",
|
|
"name": "Infotv. Ungarn",
|
|
"full_name": "Informacios torvenye (Infotv.) Ungarn",
|
|
"doc_type": "national_law",
|
|
"description": "Ungarisches Informationsgesetz ueber Selbstbestimmung und Informationsfreiheit als DSGVO-Ergaenzung. Reguliert durch NAIH.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "2018 (aktualisiert)",
|
|
"sort_order": 7,
|
|
"applicability_note": "Gilt fuer alle Branchen. Nationales Datenschutzgesetz als Ergaenzung zur DSGVO — betrifft alle Unternehmen mit Bezug zu Ungarn."
|
|
},
|
|
{
|
|
"code": "IE_DPA_2018",
|
|
"name": "DPA 2018 Ireland",
|
|
"full_name": "Data Protection Act 2018 (Ireland)",
|
|
"doc_type": "national_law",
|
|
"description": "Irisches Datenschutzgesetz. Besonders relevant da viele Tech-Konzerne (Google, Meta, Apple) ihren EU-Hauptsitz in Irland haben.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "24. Mai 2018",
|
|
"sort_order": 8,
|
|
"applicability_note": "Gilt fuer alle Branchen. Irisches Datenschutzgesetz — besonders relevant da viele Tech-Konzerne ihren EU-Hauptsitz in Irland haben."
|
|
},
|
|
{
|
|
"code": "IT_CODICE_PRIVACY",
|
|
"name": "Codice Privacy Italien",
|
|
"full_name": "Codice in materia di protezione dei dati personali (Italien)",
|
|
"doc_type": "national_law",
|
|
"description": "Italienisches Datenschutzgesetzbuch, aktualisiert gemaess DSGVO. Umfassende nationale Regelung durch den Garante.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "2018 (aktualisiert)",
|
|
"sort_order": 9,
|
|
"applicability_note": "Gilt fuer alle Branchen. Nationales Datenschutzgesetz als Ergaenzung zur DSGVO — betrifft alle Unternehmen mit Bezug zu Italien."
|
|
},
|
|
{
|
|
"code": "LI_DSG",
|
|
"name": "DSG Liechtenstein",
|
|
"full_name": "Datenschutzgesetz Liechtenstein",
|
|
"doc_type": "national_law",
|
|
"description": "Liechtensteinisches Datenschutzgesetz als EWR-Umsetzung der DSGVO.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "2018",
|
|
"sort_order": 10,
|
|
"applicability_note": "Gilt fuer alle Branchen. Nationales Datenschutzgesetz als EWR-Umsetzung der DSGVO — betrifft alle Unternehmen mit Bezug zu Liechtenstein."
|
|
},
|
|
{
|
|
"code": "LU_DPA_LAW",
|
|
"name": "Datenschutzgesetz Luxemburg",
|
|
"full_name": "Loi du 1er aout 2018 — Datenschutzgesetz Luxemburg",
|
|
"doc_type": "national_law",
|
|
"description": "Luxemburgisches Datenschutzgesetz: Organisation der CNPD, nationale DSGVO-Ergaenzung.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "1. August 2018",
|
|
"sort_order": 11,
|
|
"applicability_note": "Gilt fuer alle Branchen. Nationales Datenschutzgesetz als Ergaenzung zur DSGVO — betrifft alle Unternehmen mit Bezug zu Luxemburg."
|
|
},
|
|
{
|
|
"code": "NL_UAVG",
|
|
"name": "UAVG Niederlande",
|
|
"full_name": "Uitvoeringswet AVG (UAVG) Niederlande",
|
|
"doc_type": "national_law",
|
|
"description": "Niederlaendisches Ausfuehrungsgesetz zur DSGVO. Regelt nationale Besonderheiten wie BSN-Verarbeitung und Gesundheitsdaten.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "25. Mai 2018",
|
|
"sort_order": 12,
|
|
"applicability_note": "Gilt fuer alle Branchen. Nationales Datenschutzgesetz als Ergaenzung zur DSGVO — betrifft alle Unternehmen mit Bezug zu den Niederlanden."
|
|
},
|
|
{
|
|
"code": "NO_PERSONOPPLYSNINGSLOVEN",
|
|
"name": "Personopplysningsloven",
|
|
"full_name": "Personopplysningsloven (Norwegen)",
|
|
"doc_type": "national_law",
|
|
"description": "Norwegisches Datenschutzgesetz als EWR-Umsetzung der DSGVO. Reguliert durch Datatilsynet.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "20. Juli 2018",
|
|
"sort_order": 13,
|
|
"applicability_note": "Gilt fuer alle Branchen. Nationales Datenschutzgesetz als EWR-Umsetzung der DSGVO — betrifft alle Unternehmen mit Bezug zu Norwegen."
|
|
},
|
|
{
|
|
"code": "PL_UODO",
|
|
"name": "UODO Polen",
|
|
"full_name": "Ustawa o ochronie danych osobowych (Polen)",
|
|
"doc_type": "national_law",
|
|
"description": "Polnisches Datenschutzgesetz als DSGVO-Umsetzung. Reguliert durch den UODO.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "25. Mai 2018",
|
|
"sort_order": 14,
|
|
"applicability_note": "Gilt fuer alle Branchen. Nationales Datenschutzgesetz als Ergaenzung zur DSGVO — betrifft alle Unternehmen mit Bezug zu Polen."
|
|
},
|
|
{
|
|
"code": "SE_DATASKYDDSLAG",
|
|
"name": "Dataskyddslag Schweden",
|
|
"full_name": "Dataskyddslag (2018:218) Schweden",
|
|
"doc_type": "national_law",
|
|
"description": "Schwedisches Datenschutzgesetz als ergaenzende Bestimmungen zur DSGVO. Reguliert durch IMY.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "25. Mai 2018",
|
|
"sort_order": 15,
|
|
"applicability_note": "Gilt fuer alle Branchen. Nationales Datenschutzgesetz als Ergaenzung zur DSGVO — betrifft alle Unternehmen mit Bezug zu Schweden."
|
|
},
|
|
{
|
|
"code": "UK_DPA_2018",
|
|
"name": "DPA 2018 UK",
|
|
"full_name": "Data Protection Act 2018 (United Kingdom)",
|
|
"doc_type": "national_law",
|
|
"description": "Britisches Datenschutzgesetz nach dem Brexit. Ergaenzt die UK GDPR mit nationalen Bestimmungen, reguliert durch das ICO.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "23. Mai 2018",
|
|
"sort_order": 16,
|
|
"applicability_note": "Gilt fuer alle Branchen. Britisches Datenschutzgesetz post-Brexit — betrifft alle Unternehmen mit UK-Geschaeft."
|
|
},
|
|
{
|
|
"code": "UK_GDPR",
|
|
"name": "UK GDPR",
|
|
"full_name": "UK General Data Protection Regulation (retained EU law)",
|
|
"doc_type": "national_law",
|
|
"description": "In UK-Recht ueberfuehrte DSGVO nach dem Brexit. Weitgehend identisch mit EU-DSGVO, aber unter britischer Aufsicht (ICO).",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "1. Januar 2021",
|
|
"sort_order": 17,
|
|
"applicability_note": "Gilt fuer alle Branchen. In UK-Recht ueberfuehrte DSGVO — betrifft alle Unternehmen die Daten von UK-Buergern verarbeiten."
|
|
},
|
|
{
|
|
"code": "BSI_200_4",
|
|
"name": "BSI Standard 200-4",
|
|
"full_name": "BSI Standard 200-4 Business Continuity Management",
|
|
"doc_type": "bsi_standard",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"sort_order": 1,
|
|
"applicability_note": "Gilt fuer alle Branchen. Business Continuity Management ist fuer jedes produzierende Unternehmen relevant."
|
|
},
|
|
{
|
|
"code": "BSI-TR-03161-1",
|
|
"name": "BSI-TR Teil 1",
|
|
"full_name": "BSI TR-03161 Teil 1 — Sicherheitsanforderungen DiGA — Mobile Anwendungen",
|
|
"doc_type": "bsi_standard",
|
|
"description": "Deutsche Technische Richtlinie fuer die Sicherheit mobiler Gesundheits-Apps (DiGA). Definiert Pruefverfahren und Sicherheitsanforderungen fuer die DiGA-Zulassung.",
|
|
"industries": [],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "Version 1.0: 2020",
|
|
"sort_order": 2,
|
|
"applicability_note": "Nicht zutreffend fuer produzierende Industrie. Spezifisch fuer Digitale Gesundheitsanwendungen (DiGA)."
|
|
},
|
|
{
|
|
"code": "BSI-TR-03161-2",
|
|
"name": "BSI-TR Teil 2",
|
|
"full_name": "BSI TR-03161 Teil 2 — Sicherheitsanforderungen DiGA — Web-Anwendungen",
|
|
"doc_type": "bsi_standard",
|
|
"description": "Technische Richtlinie fuer die Sicherheit von Web-Anwendungen im Gesundheitswesen.",
|
|
"industries": [],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "Version 1.0: 2020",
|
|
"sort_order": 3,
|
|
"applicability_note": "Nicht zutreffend fuer produzierende Industrie. Spezifisch fuer Digitale Gesundheitsanwendungen (DiGA)."
|
|
},
|
|
{
|
|
"code": "BSI-TR-03161-3",
|
|
"name": "BSI-TR Teil 3",
|
|
"full_name": "BSI TR-03161 Teil 3 — Sicherheitsanforderungen DiGA — Hintergrundsysteme",
|
|
"doc_type": "bsi_standard",
|
|
"description": "Technische Richtlinie fuer Backend-Systeme von Gesundheitsanwendungen. Deckt Server, APIs, Datenbanken und Cloud-Infrastruktur ab.",
|
|
"industries": [],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"effective_date": "Version 1.0: 2020",
|
|
"sort_order": 4,
|
|
"applicability_note": "Nicht zutreffend fuer produzierende Industrie. Spezifisch fuer Digitale Gesundheitsanwendungen (DiGA)."
|
|
},
|
|
{
|
|
"code": "EDPB_ACCESS_01_2022",
|
|
"name": "EDPB GL Auskunftsrecht",
|
|
"full_name": "EDPB Leitlinien 01/2022 — Recht auf Auskunft",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 1
|
|
},
|
|
{
|
|
"code": "EDPB_ARTICLE48_02_2024",
|
|
"name": "EDPB GL Art. 48",
|
|
"full_name": "EDPB Leitlinien 02/2024 — Artikel 48 DSGVO",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 2
|
|
},
|
|
{
|
|
"code": "EDPB_BCR_01_2022",
|
|
"name": "EDPB GL BCR",
|
|
"full_name": "EDPB Empfehlungen 01/2022 — Binding Corporate Rules",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 3
|
|
},
|
|
{
|
|
"code": "EDPB_BREACH_09_2022",
|
|
"name": "EDPB GL Datenpannen",
|
|
"full_name": "EDPB Leitlinien 09/2022 — Meldung von Datenschutzverletzungen",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 4
|
|
},
|
|
{
|
|
"code": "EDPB_CERTIFICATION_01_2018",
|
|
"name": "EDPB GL Zertifizierung 2018",
|
|
"full_name": "EDPB Leitlinien 01/2018 — Zertifizierung und Kriterienermittlung",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 5
|
|
},
|
|
{
|
|
"code": "EDPB_CERTIFICATION_01_2019",
|
|
"name": "EDPB GL Zertifizierung 2019",
|
|
"full_name": "EDPB Leitlinien 01/2019 — Zertifizierung (aktualisiert)",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 6
|
|
},
|
|
{
|
|
"code": "EDPB_CONNECTED_VEHICLES_01_2020",
|
|
"name": "EDPB GL Vernetzte Fahrzeuge",
|
|
"full_name": "EDPB Leitlinien 01/2020 — Vernetzte Fahrzeuge und Mobilitaetsdaten",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 7
|
|
},
|
|
{
|
|
"code": "EDPB_CONSENT_05_2020",
|
|
"name": "EDPB GL Einwilligung",
|
|
"full_name": "EDPB Leitlinien 05/2020 — Einwilligung gemaess DSGVO",
|
|
"doc_type": "edpb_guideline",
|
|
"description": "EDPB-Leitlinien zur Einwilligung gemaess DSGVO. Klaert Anforderungen an gueltige Einwilligungen, Widerruf und Cookie-Consent.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"effective_date": "2020",
|
|
"sort_order": 8,
|
|
"applicability_note": "Gilt fuer alle Branchen. EDPB-Leitlinien zur Einwilligung betreffen jedes Unternehmen das Einwilligungen einholt."
|
|
},
|
|
{
|
|
"code": "EDPB_CONTROLLER_PROCESSOR_07_2020",
|
|
"name": "EDPB GL Verantwortliche/Auftragsverarbeiter",
|
|
"full_name": "EDPB Leitlinien 07/2020 — Verantwortlicher und Auftragsverarbeiter",
|
|
"doc_type": "edpb_guideline",
|
|
"description": "EDPB-Leitlinien zu den Begriffen Verantwortlicher und Auftragsverarbeiter. Klaert Rollen, Pflichten und Joint Controllership.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"effective_date": "2021",
|
|
"sort_order": 9,
|
|
"applicability_note": "Gilt fuer alle Branchen. Klaerung der Rollen Verantwortlicher/Auftragsverarbeiter ist branchenuebergreifend relevant."
|
|
},
|
|
{
|
|
"code": "EDPB_COOKIE_TASKFORCE_2023",
|
|
"name": "EDPB Cookie-Banner Taskforce",
|
|
"full_name": "EDPB Cookie-Banner Taskforce Report 2023",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 10
|
|
},
|
|
{
|
|
"code": "EDPB_DARK_PATTERNS_03_2022",
|
|
"name": "EDPB GL Dark Patterns",
|
|
"full_name": "EDPB Leitlinien 03/2022 — Dark Patterns auf Social-Media-Plattformen",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 11
|
|
},
|
|
{
|
|
"code": "EDPB_DPBD_04_2019",
|
|
"name": "EDPB GL Data Protection by Design",
|
|
"full_name": "EDPB Leitlinien 04/2019 — Datenschutz durch Technikgestaltung (Art. 25)",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 12
|
|
},
|
|
{
|
|
"code": "EDPB_DPIA_LIST",
|
|
"name": "EDPB DPIA-Liste",
|
|
"full_name": "EDPB DPIA-Empfehlungsliste",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 13
|
|
},
|
|
{
|
|
"code": "EDPB_DPIA_LIST_RECOMMENDATION",
|
|
"name": "EDPB DPIA-Empfehlung",
|
|
"full_name": "EDPB Konsistenz-Stellungnahmen zu DPIA-Listen",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 14
|
|
},
|
|
{
|
|
"code": "EDPB_EPRIVACY_02_2023",
|
|
"name": "EDPB GL ePrivacy",
|
|
"full_name": "EDPB Leitlinien 02/2023 — Technischer Anwendungsbereich Art. 5(3) ePrivacy",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 15
|
|
},
|
|
{
|
|
"code": "EDPB_FACIAL_RECOGNITION_05_2022",
|
|
"name": "EDPB GL Gesichtserkennung",
|
|
"full_name": "EDPB Leitlinien 05/2022 — Gesichtserkennung im Bereich Strafverfolgung",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 16
|
|
},
|
|
{
|
|
"code": "EDPB_FINES_04_2022",
|
|
"name": "EDPB GL Bussgeldberechnung",
|
|
"full_name": "EDPB Leitlinien 04/2022 — Berechnung von Bussgeldern nach der DSGVO",
|
|
"doc_type": "edpb_guideline",
|
|
"description": "EDPB-Leitlinien zur Berechnung von Verwaltungsbussgeldern unter der DSGVO. Systematik, Schwere, Milderungsgruende.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"effective_date": "2022",
|
|
"sort_order": 17,
|
|
"applicability_note": "Gilt fuer alle Branchen. Bussgeldberechnung kann jedes Unternehmen betreffen das gegen die DSGVO verstoesst."
|
|
},
|
|
{
|
|
"code": "EDPB_GEOLOCATION_04_2020",
|
|
"name": "EDPB GL Geolokalisierung",
|
|
"full_name": "EDPB Leitlinien 04/2020 — Standortdaten und Contact Tracing",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 18
|
|
},
|
|
{
|
|
"code": "EDPB_GL_2_2019",
|
|
"name": "EDPB GL Art. 6(1)(b)",
|
|
"full_name": "EDPB Leitlinien 2/2019 — Art. 6(1)(b) DSGVO Vertragserfullung",
|
|
"doc_type": "edpb_guideline",
|
|
"description": "EDPB-Leitlinien zur Verarbeitung personenbezogener Daten auf Grundlage der Vertragserfullung gemaess Art. 6 Abs. 1 lit. b DSGVO.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"effective_date": "2019",
|
|
"sort_order": 19,
|
|
"applicability_note": "Gilt fuer alle Branchen. Rechtsgrundlage Vertragserfullung ist fuer alle datenverarbeitenden Unternehmen relevant."
|
|
},
|
|
{
|
|
"code": "EDPB_GUIDELINES_7_2020",
|
|
"name": "EDPB GL Controller/Processor",
|
|
"full_name": "EDPB Leitlinien 7/2020 — Controller und Processor",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 20
|
|
},
|
|
{
|
|
"code": "EDPB_HEALTH_DATA_03_2020",
|
|
"name": "EDPB GL Gesundheitsdaten",
|
|
"full_name": "EDPB Leitlinien 03/2020 — Verarbeitung von Gesundheitsdaten",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 21
|
|
},
|
|
{
|
|
"code": "EDPB_LEGAL_BASIS_02_2019",
|
|
"name": "EDPB GL Rechtsgrundlage Art. 6(1)(b)",
|
|
"full_name": "EDPB Leitlinien 02/2019 — Rechtsgrundlage Vertragserfullung",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 22
|
|
},
|
|
{
|
|
"code": "EDPB_LEGITIMATE_INTEREST",
|
|
"name": "EDPB Berecht. Interesse",
|
|
"full_name": "EDPB Leitlinien Berechtigtes Interesse",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 23
|
|
},
|
|
{
|
|
"code": "EDPB_LEGITIMATE_INTEREST_01_2024",
|
|
"name": "EDPB GL Berecht. Interesse 2024",
|
|
"full_name": "EDPB Leitlinien 01/2024 — Berechtigtes Interesse (aktualisiert)",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 24
|
|
},
|
|
{
|
|
"code": "EDPB_RRO_09_2020",
|
|
"name": "EDPB GL Relevant & Reasoned Objection",
|
|
"full_name": "EDPB Leitlinien 09/2020 — Relevant and Reasoned Objection",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 25
|
|
},
|
|
{
|
|
"code": "EDPB_RTBF_05_2019",
|
|
"name": "EDPB GL Recht auf Vergessenwerden",
|
|
"full_name": "EDPB Leitlinien 05/2019 — Recht auf Vergessenwerden (Art. 17)",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 26
|
|
},
|
|
{
|
|
"code": "EDPB_SOCIAL_MEDIA_08_2020",
|
|
"name": "EDPB GL Social Media Targeting",
|
|
"full_name": "EDPB Leitlinien 08/2020 — Targeting von Social-Media-Nutzern",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 27
|
|
},
|
|
{
|
|
"code": "EDPB_TRANSFERS_01_2020",
|
|
"name": "EDPB GL Uebermittlungen",
|
|
"full_name": "EDPB Empfehlungen 01/2020 — Massnahmen zur Ergaenzung von Uebermittlungsgarantien",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 28
|
|
},
|
|
{
|
|
"code": "EDPB_TRANSFERS_07_2020",
|
|
"name": "EDPB GL Drittlandtransfers",
|
|
"full_name": "EDPB Leitlinien 07/2020 — Drittlandtransfers",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 29
|
|
},
|
|
{
|
|
"code": "EDPB_VIDEO_03_2019",
|
|
"name": "EDPB GL Videoueberwachung",
|
|
"full_name": "EDPB Leitlinien 03/2019 — Verarbeitung durch Videoueberwachung",
|
|
"doc_type": "edpb_guideline",
|
|
"description": "EDPB-Leitlinien zur Verarbeitung personenbezogener Daten durch Videoueberwachungsgeraete.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"effective_date": "2020",
|
|
"sort_order": 30,
|
|
"applicability_note": "Gilt fuer alle Branchen. Videoueberwachung kann in jedem Unternehmen eingesetzt werden."
|
|
},
|
|
{
|
|
"code": "EDPB_VVA_02_2021",
|
|
"name": "EDPB GL Virtuelle Sprachassistenten",
|
|
"full_name": "EDPB Leitlinien 02/2021 — Virtuelle Sprachassistenten",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 31
|
|
},
|
|
{
|
|
"code": "EDPS_DIGITAL_ETHICS_2018",
|
|
"name": "EDPS Digitale Ethik",
|
|
"full_name": "EDPS Ethics Advisory Group Report 2018 — Towards a Digital Ethics",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 32
|
|
},
|
|
{
|
|
"code": "EDPS_DPIA_LIST",
|
|
"name": "EDPS DPIA-Liste",
|
|
"full_name": "EDPS Positivliste — Datenschutz-Folgenabschaetzung",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 33
|
|
},
|
|
{
|
|
"code": "EDPS_GENAI_ORIENTATIONS_2024",
|
|
"name": "EDPS GenAI Orientierungen",
|
|
"full_name": "EDPS Orientierungen zu Generativer KI 2024",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 34
|
|
},
|
|
{
|
|
"code": "WP242_PORTABILITY",
|
|
"name": "WP242 Datenportabilitaet",
|
|
"full_name": "WP29 Leitlinien WP242 — Recht auf Datenportabilitaet",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 35
|
|
},
|
|
{
|
|
"code": "WP243_DPO",
|
|
"name": "WP243 Datenschutzbeauftragter",
|
|
"full_name": "WP29 Leitlinien WP243 — Datenschutzbeauftragter",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 36
|
|
},
|
|
{
|
|
"code": "WP244_PROFILING",
|
|
"name": "WP244 Profiling",
|
|
"full_name": "WP29 Leitlinien WP244/WP251 — Profiling und automatisierte Entscheidungsfindung",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 37
|
|
},
|
|
{
|
|
"code": "WP248_DPIA",
|
|
"name": "WP248 DSFA",
|
|
"full_name": "WP29 Leitlinien WP248 — Datenschutz-Folgenabschaetzung",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 38
|
|
},
|
|
{
|
|
"code": "WP250_BREACH",
|
|
"name": "WP250 Datenpannen",
|
|
"full_name": "WP29 Leitlinien WP250 — Meldung von Datenpannen",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 39
|
|
},
|
|
{
|
|
"code": "WP259_CONSENT",
|
|
"name": "WP259 Einwilligung",
|
|
"full_name": "WP29 Leitlinien WP259 — Einwilligung",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 40
|
|
},
|
|
{
|
|
"code": "WP260_TRANSPARENCY",
|
|
"name": "WP260 Transparenz",
|
|
"full_name": "WP29 Leitlinien WP260 — Transparenz",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 41
|
|
},
|
|
{
|
|
"code": "BFDI_LOESCHKONZEPT",
|
|
"name": "BfDI Loeschkonzept",
|
|
"full_name": "BfDI Loeschkonzept — Umsetzung der Loeschpflicht nach Art. 17 DSGVO",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 1
|
|
},
|
|
{
|
|
"code": "BFDI_KI_BEHOERDEN",
|
|
"name": "BfDI Handreichung KI in Behoerden",
|
|
"full_name": "BfDI Handreichung KI in Behoerden",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 2
|
|
},
|
|
{
|
|
"code": "BFDI_KI_SICHERHEIT",
|
|
"name": "BfDI Handreichung KI und IT-Sicherheit",
|
|
"full_name": "BfDI Handreichung KI und IT-Sicherheit",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 3
|
|
},
|
|
{
|
|
"code": "BAYLDA_CHECKLISTE_TOM",
|
|
"name": "BayLDA Checkliste TOM",
|
|
"full_name": "BayLDA Checkliste TOM (Art. 32 DSGVO)",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 4
|
|
},
|
|
{
|
|
"code": "BAYLDA_OH_LOESCHUNG",
|
|
"name": "BayLfD OH Loeschung",
|
|
"full_name": "BayLfD Orientierungshilfe Loeschung personenbezogener Daten",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 5
|
|
},
|
|
{
|
|
"code": "DSK_AH_BUSSGELDKONZEPT",
|
|
"name": "DSK AH Bussgeldkonzept",
|
|
"full_name": "DSK Anwendungshinweise Bussgeldkonzept",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 6
|
|
},
|
|
{
|
|
"code": "DSK_AH_DSFA_MUSSLISTE",
|
|
"name": "DSK AH DSFA Muss-Liste",
|
|
"full_name": "DSK Anwendungshinweise DSFA Muss-Liste",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 7
|
|
},
|
|
{
|
|
"code": "DSK_AH_EU_US_DPF",
|
|
"name": "DSK AH EU-US DPF",
|
|
"full_name": "DSK Anwendungshinweise EU-US Data Privacy Framework",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 8
|
|
},
|
|
{
|
|
"code": "DSK_AH_VVT",
|
|
"name": "DSK AH Verzeichnis VVT",
|
|
"full_name": "DSK Anwendungshinweise Verzeichnis von Verarbeitungstaetigkeiten",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 9
|
|
},
|
|
{
|
|
"code": "DSK_AH_ZERTIFIZIERUNG",
|
|
"name": "DSK AH Zertifizierung",
|
|
"full_name": "DSK Anwendungshinweise Zertifizierung",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 10
|
|
},
|
|
{
|
|
"code": "DSK_BESCHLUSS_MS365",
|
|
"name": "DSK Beschluss MS 365",
|
|
"full_name": "DSK Beschluss zu Microsoft 365",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 11
|
|
},
|
|
{
|
|
"code": "DSK_BESCHLUSS_ONLINEHANDEL",
|
|
"name": "DSK Beschluss Onlinehandel",
|
|
"full_name": "DSK Beschluss Onlinehandel",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 12
|
|
},
|
|
{
|
|
"code": "DSK_ENTSCHL_BESCHAEFTIGTENDATENSCHUTZ",
|
|
"name": "DSK Entschliessung Beschaeftigtendatenschutz",
|
|
"full_name": "DSK Entschliessung Beschaeftigtendatenschutz",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 13
|
|
},
|
|
{
|
|
"code": "DSK_KP_1",
|
|
"name": "DSK Kurzpapier Nr. 1",
|
|
"full_name": "DSK Kurzpapier Nr. 1 — Verzeichnis von Verarbeitungstaetigkeiten",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 14
|
|
},
|
|
{
|
|
"code": "DSK_KP_2",
|
|
"name": "DSK Kurzpapier Nr. 2",
|
|
"full_name": "DSK Kurzpapier Nr. 2 — Datenschutzbeauftragte bei Verantwortlichen und Auftragsverarbeitern",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 15
|
|
},
|
|
{
|
|
"code": "DSK_KP_3",
|
|
"name": "DSK Kurzpapier Nr. 3",
|
|
"full_name": "DSK Kurzpapier Nr. 3 — Verarbeitung personenbezogener Daten fuer Werbung",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 16
|
|
},
|
|
{
|
|
"code": "DSK_KP_4",
|
|
"name": "DSK Kurzpapier Nr. 4",
|
|
"full_name": "DSK Kurzpapier Nr. 4 — Datenuebermittlung in Drittlaender",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 17
|
|
},
|
|
{
|
|
"code": "DSK_KP_5",
|
|
"name": "DSK Kurzpapier Nr. 5",
|
|
"full_name": "DSK Kurzpapier Nr. 5 — Datenschutz-Folgenabschaetzung",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 18
|
|
},
|
|
{
|
|
"code": "DSK_KP_6",
|
|
"name": "DSK Kurzpapier Nr. 6",
|
|
"full_name": "DSK Kurzpapier Nr. 6 — Auskunftsrecht der betroffenen Person",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 19
|
|
},
|
|
{
|
|
"code": "DSK_KP_7",
|
|
"name": "DSK Kurzpapier Nr. 7",
|
|
"full_name": "DSK Kurzpapier Nr. 7 — Marktortprinzip",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 20
|
|
},
|
|
{
|
|
"code": "DSK_KP_8",
|
|
"name": "DSK Kurzpapier Nr. 8",
|
|
"full_name": "DSK Kurzpapier Nr. 8 — Massnahmenplan DSGVO fuer Unternehmen",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 21
|
|
},
|
|
{
|
|
"code": "DSK_KP_9",
|
|
"name": "DSK Kurzpapier Nr. 9",
|
|
"full_name": "DSK Kurzpapier Nr. 9 — Zertifizierung nach Art. 42 DSGVO",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 22
|
|
},
|
|
{
|
|
"code": "DSK_KP_10",
|
|
"name": "DSK Kurzpapier Nr. 10",
|
|
"full_name": "DSK Kurzpapier Nr. 10 — Informationspflichten bei Dritt- und Direkterhebung",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 23
|
|
},
|
|
{
|
|
"code": "DSK_KP_11",
|
|
"name": "DSK Kurzpapier Nr. 11",
|
|
"full_name": "DSK Kurzpapier Nr. 11 — Einwilligung nach der DSGVO",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 24
|
|
},
|
|
{
|
|
"code": "DSK_KP_12",
|
|
"name": "DSK Kurzpapier Nr. 12",
|
|
"full_name": "DSK Kurzpapier Nr. 12 — Datenschutzbeauftragte (Art. 37-39 DSGVO, § 38 BDSG)",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 25
|
|
},
|
|
{
|
|
"code": "DSK_KP_13",
|
|
"name": "DSK Kurzpapier Nr. 13",
|
|
"full_name": "DSK Kurzpapier Nr. 13 — Auftragsverarbeitung (Art. 28 DSGVO)",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 26
|
|
},
|
|
{
|
|
"code": "DSK_KP_14",
|
|
"name": "DSK Kurzpapier Nr. 14",
|
|
"full_name": "DSK Kurzpapier Nr. 14 — Beschaeftigtendatenschutz",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 27
|
|
},
|
|
{
|
|
"code": "DSK_KP_15",
|
|
"name": "DSK Kurzpapier Nr. 15",
|
|
"full_name": "DSK Kurzpapier Nr. 15 — Videoueberwachung nach der DSGVO",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 28
|
|
},
|
|
{
|
|
"code": "DSK_KP_16",
|
|
"name": "DSK Kurzpapier Nr. 16",
|
|
"full_name": "DSK Kurzpapier Nr. 16 — Gemeinsam fuer die Verarbeitung Verantwortliche",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 29
|
|
},
|
|
{
|
|
"code": "DSK_KP_17",
|
|
"name": "DSK Kurzpapier Nr. 17",
|
|
"full_name": "DSK Kurzpapier Nr. 17 — Besondere Kategorien personenbezogener Daten",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 30
|
|
},
|
|
{
|
|
"code": "DSK_KP_18",
|
|
"name": "DSK Kurzpapier Nr. 18",
|
|
"full_name": "DSK Kurzpapier Nr. 18 — Risiko fuer die Rechte und Freiheiten natuerlicher Personen",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 31
|
|
},
|
|
{
|
|
"code": "DSK_KP_19",
|
|
"name": "DSK Kurzpapier Nr. 19",
|
|
"full_name": "DSK Kurzpapier Nr. 19 — Unterrichtung und Verpflichtung von Beschaeftigten",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 32
|
|
},
|
|
{
|
|
"code": "DSK_KP_20",
|
|
"name": "DSK Kurzpapier Nr. 20",
|
|
"full_name": "DSK Kurzpapier Nr. 20 — Einwilligung nach Art. 6 Abs. 1 lit. a und Art. 7 DSGVO",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 33
|
|
},
|
|
{
|
|
"code": "DSK_OH_DATENUEBERMITTLUNG",
|
|
"name": "DSK OH Datenuebermittlung Drittlaender",
|
|
"full_name": "DSK Orientierungshilfe Datenuebermittlung in Drittlaender",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 34
|
|
},
|
|
{
|
|
"code": "DSK_OH_DIGITALE_DIENSTE",
|
|
"name": "DSK OH Digitale Dienste",
|
|
"full_name": "DSK Orientierungshilfe Digitale Dienste",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 35
|
|
},
|
|
{
|
|
"code": "DSK_OH_DIREKTWERBUNG",
|
|
"name": "DSK OH Direktwerbung",
|
|
"full_name": "DSK Orientierungshilfe Direktwerbung",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 36
|
|
},
|
|
{
|
|
"code": "DSK_OH_EMAIL_VERSCHLUESSELUNG",
|
|
"name": "DSK OH E-Mail-Verschluesselung",
|
|
"full_name": "DSK Orientierungshilfe E-Mail-Verschluesselung",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 37
|
|
},
|
|
{
|
|
"code": "DSK_OH_KI_DATENSCHUTZ",
|
|
"name": "DSK OH KI und Datenschutz",
|
|
"full_name": "DSK Orientierungshilfe KI und Datenschutz",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 38
|
|
},
|
|
{
|
|
"code": "DSK_OH_KI_RAG",
|
|
"name": "DSK OH KI RAG",
|
|
"full_name": "DSK Orientierungshilfe KI und RAG",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 39
|
|
},
|
|
{
|
|
"code": "DSK_OH_KI_SYSTEME_TOM",
|
|
"name": "DSK OH KI Systeme TOM",
|
|
"full_name": "DSK Orientierungshilfe KI-Systeme — technisch-organisatorische Massnahmen",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 40
|
|
},
|
|
{
|
|
"code": "DSK_OH_ONLINEDIENSTE_ZUGANG",
|
|
"name": "DSK OH Onlinedienste Zugang",
|
|
"full_name": "DSK Orientierungshilfe Zugang zu Onlinediensten",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 41
|
|
},
|
|
{
|
|
"code": "DSK_OH_TELEMEDIEN",
|
|
"name": "DSK OH Telemedien",
|
|
"full_name": "DSK Orientierungshilfe Telemedien (TTDSG/TDDDG)",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 42
|
|
},
|
|
{
|
|
"code": "DSK_OH_VIDEOKONFERENZ",
|
|
"name": "DSK OH Videokonferenz",
|
|
"full_name": "DSK Orientierungshilfe Videokonferenzsysteme",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 43
|
|
},
|
|
{
|
|
"code": "DSK_OH_VIDEOUEBERWACHUNG",
|
|
"name": "DSK OH Videoueberwachung",
|
|
"full_name": "DSK Orientierungshilfe Videoueberwachung",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 44
|
|
},
|
|
{
|
|
"code": "DSK_OH_WHISTLEBLOWING",
|
|
"name": "DSK OH Whistleblowing",
|
|
"full_name": "DSK Orientierungshilfe Whistleblowing-Hotlines",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 45
|
|
},
|
|
{
|
|
"code": "DSK_POS_KI_VERORDNUNG",
|
|
"name": "DSK Positionierung KI-Verordnung",
|
|
"full_name": "DSK Positionierung zur KI-Verordnung",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 46
|
|
},
|
|
{
|
|
"code": "DSK_SDM_METHODE",
|
|
"name": "SDM Methode",
|
|
"full_name": "Standard-Datenschutzmodell (SDM) — Methode",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 47
|
|
},
|
|
{
|
|
"code": "SDM_V31",
|
|
"name": "SDM V3.1",
|
|
"full_name": "Standard-Datenschutzmodell (SDM) V3.1",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 48
|
|
},
|
|
{
|
|
"code": "DSK_SDM_B11_AUFBEWAHREN",
|
|
"name": "SDM B11 Aufbewahren",
|
|
"full_name": "DSK SDM Baustein B11 — Aufbewahren",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 49
|
|
},
|
|
{
|
|
"code": "DSK_SDM_B41_PLANEN",
|
|
"name": "SDM B41 Planen",
|
|
"full_name": "DSK SDM Baustein B41 — Planen und Spezifizieren",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 50
|
|
},
|
|
{
|
|
"code": "DSK_SDM_B42_DOKUMENTIEREN",
|
|
"name": "SDM B42 Dokumentieren",
|
|
"full_name": "DSK SDM Baustein B42 — Dokumentieren",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 51
|
|
},
|
|
{
|
|
"code": "DSK_SDM_B43_PROTOKOLLIEREN",
|
|
"name": "SDM B43 Protokollieren",
|
|
"full_name": "DSK SDM Baustein B43 — Protokollieren",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 52
|
|
},
|
|
{
|
|
"code": "DSK_SDM_B50_TRENNEN",
|
|
"name": "SDM B50 Trennen",
|
|
"full_name": "DSK SDM Baustein B50 — Trennen",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 53
|
|
},
|
|
{
|
|
"code": "DSK_SDM_B51_ZUGRIFFE",
|
|
"name": "SDM B51 Zugriffe steuern",
|
|
"full_name": "DSK SDM Baustein B51 — Zugriffe steuern",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 54
|
|
},
|
|
{
|
|
"code": "DSK_SDM_B60_LOESCHEN",
|
|
"name": "SDM B60 Loeschen",
|
|
"full_name": "DSK SDM Baustein B60 — Loeschen und Vernichten",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 55
|
|
},
|
|
{
|
|
"code": "DSK_SDM_B61_BERICHTIGEN",
|
|
"name": "SDM B61 Berichtigen",
|
|
"full_name": "DSK SDM Baustein B61 — Berichtigen",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 56
|
|
},
|
|
{
|
|
"code": "DSK_SDM_B62_EINSCHRAENKEN",
|
|
"name": "SDM B62 Einschraenken",
|
|
"full_name": "DSK SDM Baustein B62 — Einschraenken der Verarbeitung",
|
|
"doc_type": "dsk_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 57
|
|
},
|
|
{
|
|
"code": "BAG_1_ABN_36_18",
|
|
"name": "BAG 1 ABN 36/18",
|
|
"full_name": "BAG 1 ABN 36/18 — Excel/Standardsoftware, keine Geringfuegigkeitsschwelle",
|
|
"doc_type": "court_decision",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 1
|
|
},
|
|
{
|
|
"code": "BAG_1_ABR_13_17",
|
|
"name": "BAG 1 ABR 13/17",
|
|
"full_name": "BAG 1 ABR 13/17 — IT-System fuer Mitarbeiterbefragung",
|
|
"doc_type": "court_decision",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 2
|
|
},
|
|
{
|
|
"code": "BAG_1_ABR_16_23",
|
|
"name": "BAG 1 ABR 16/23",
|
|
"full_name": "BAG 1 ABR 16/23 — Headset-System, Geraetenutzungsdaten",
|
|
"doc_type": "court_decision",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 3
|
|
},
|
|
{
|
|
"code": "BAG_1_ABR_20_21",
|
|
"name": "BAG 1 ABR 20/21",
|
|
"full_name": "BAG 1 ABR 20/21 — Microsoft Office 365, Mitbestimmung",
|
|
"doc_type": "court_decision",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 4
|
|
},
|
|
{
|
|
"code": "BAG_1_ABR_22_21",
|
|
"name": "BAG 1 ABR 22/21",
|
|
"full_name": "BAG 1 ABR 22/21 — Elektronische Arbeitszeiterfassung, Initiativrecht",
|
|
"doc_type": "court_decision",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 5
|
|
},
|
|
{
|
|
"code": "BAG_1_ABR_31_19",
|
|
"name": "BAG 1 ABR 31/19",
|
|
"full_name": "BAG 1 ABR 31/19 — E-Mail-Kommunikationssoftware, Mitbestimmung",
|
|
"doc_type": "court_decision",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 6
|
|
},
|
|
{
|
|
"code": "BAG_1_ABR_32_16",
|
|
"name": "BAG 1 ABR 32/16",
|
|
"full_name": "BAG 1 ABR 32/16 — Anti-Terror-Listen, keine Mitbestimmung",
|
|
"doc_type": "court_decision",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 7
|
|
},
|
|
{
|
|
"code": "BAG_1_ABR_43_12",
|
|
"name": "BAG 1 ABR 43/12",
|
|
"full_name": "BAG 1 ABR 43/12 — Google Maps, indirekte Ueberwachung",
|
|
"doc_type": "court_decision",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 8
|
|
},
|
|
{
|
|
"code": "BAG_1_ABR_45_11",
|
|
"name": "BAG 1 ABR 45/11",
|
|
"full_name": "BAG 1 ABR 45/11 — SAP ERP im Personalwesen",
|
|
"doc_type": "court_decision",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 9
|
|
},
|
|
{
|
|
"code": "BAG_1_ABR_46_10",
|
|
"name": "BAG 1 ABR 46/10",
|
|
"full_name": "BAG 1 ABR 46/10 — Internet- und E-Mail-Nutzung, Kommunikationsdaten",
|
|
"doc_type": "court_decision",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 10
|
|
},
|
|
{
|
|
"code": "BAG_1_ABR_46_15",
|
|
"name": "BAG 1 ABR 46/15",
|
|
"full_name": "BAG 1 ABR 46/15 — Belastungsstatistik, dauerhafte Kennzahlenueberwachung",
|
|
"doc_type": "court_decision",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 11
|
|
},
|
|
{
|
|
"code": "BAG_1_ABR_68_13",
|
|
"name": "BAG 1 ABR 68/13",
|
|
"full_name": "BAG 1 ABR 68/13 — Ueberwachung durch technische Einrichtung eines Dritten (SaaS/Cloud)",
|
|
"doc_type": "court_decision",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 12
|
|
},
|
|
{
|
|
"code": "BAG_1_ABR_78_11",
|
|
"name": "BAG 1 ABR 78/11",
|
|
"full_name": "BAG 1 ABR 78/11 — Videoueberwachung, Grundsatzentscheidung",
|
|
"doc_type": "court_decision",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 13
|
|
},
|
|
{
|
|
"code": "BAG_1_ABR_7_15",
|
|
"name": "BAG 1 ABR 7/15",
|
|
"full_name": "BAG 1 ABR 7/15 — Facebook-Seite, indirekte Leistungsueberwachung",
|
|
"doc_type": "court_decision",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 14
|
|
},
|
|
{
|
|
"code": "BGH_ART82_2024",
|
|
"name": "BGH Art. 82 DSGVO (2024)",
|
|
"full_name": "BGH Urteil zu Art. 82 DSGVO — Schadensersatz (2024)",
|
|
"doc_type": "court_decision",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 15
|
|
},
|
|
{
|
|
"code": "BGH_PLANET49",
|
|
"name": "BGH Planet49",
|
|
"full_name": "BGH Planet49 — Cookie-Einwilligung",
|
|
"doc_type": "court_decision",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 16
|
|
},
|
|
{
|
|
"code": "BGH_VI_ZR_396_24",
|
|
"name": "BGH VI ZR 396/24",
|
|
"full_name": "BGH VI ZR 396/24",
|
|
"doc_type": "court_decision",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 17
|
|
},
|
|
{
|
|
"code": "BVGE_2024_IV_2",
|
|
"name": "BVGer 2024/IV/2",
|
|
"full_name": "BVGer 2024/IV/2 — Schweizer Verwaltungsgericht",
|
|
"doc_type": "court_decision",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 18
|
|
},
|
|
{
|
|
"code": "OGH_6OB102_24D",
|
|
"name": "OGH 6 Ob 102/24d",
|
|
"full_name": "OGH 6 Ob 102/24d",
|
|
"doc_type": "court_decision",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 19
|
|
},
|
|
{
|
|
"code": "OGH_6OB70_24Y",
|
|
"name": "OGH 6 Ob 70/24y",
|
|
"full_name": "OGH 6 Ob 70/24y",
|
|
"doc_type": "court_decision",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 20
|
|
},
|
|
{
|
|
"code": "DSFA_BFDI_BUND",
|
|
"name": "DSFA BfDI Bund",
|
|
"full_name": "BfDI DSFA-Liste Bund (Art. 35 Abs. 4 DSGVO)",
|
|
"doc_type": "dsfa_list",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_dsfa_corpus",
|
|
"sort_order": 1
|
|
},
|
|
{
|
|
"code": "DSFA_DSK_GEMEINSAM",
|
|
"name": "DSFA DSK Gemeinsam",
|
|
"full_name": "DSK gemeinsame DSFA-Liste (Art. 35 Abs. 4 DSGVO)",
|
|
"doc_type": "dsfa_list",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_dsfa_corpus",
|
|
"sort_order": 2
|
|
},
|
|
{
|
|
"code": "DSFA_BW",
|
|
"name": "DSFA Baden-Wuerttemberg",
|
|
"full_name": "LfDI Baden-Wuerttemberg DSFA-Liste (Art. 35 Abs. 4 DSGVO)",
|
|
"doc_type": "dsfa_list",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_dsfa_corpus",
|
|
"sort_order": 3
|
|
},
|
|
{
|
|
"code": "DSFA_BY",
|
|
"name": "DSFA Bayern",
|
|
"full_name": "BayLDA Bayern DSFA-Liste (Art. 35 Abs. 4 DSGVO)",
|
|
"doc_type": "dsfa_list",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_dsfa_corpus",
|
|
"sort_order": 4
|
|
},
|
|
{
|
|
"code": "DSFA_BE_OE",
|
|
"name": "DSFA Berlin oeffentlich",
|
|
"full_name": "BlnBDI Berlin DSFA-Liste oeffentlich (Art. 35 Abs. 4 DSGVO)",
|
|
"doc_type": "dsfa_list",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_dsfa_corpus",
|
|
"sort_order": 5
|
|
},
|
|
{
|
|
"code": "DSFA_BE_NOE",
|
|
"name": "DSFA Berlin nicht-oeffentlich",
|
|
"full_name": "BlnBDI Berlin DSFA-Liste nicht-oeffentlich (Art. 35 Abs. 4 DSGVO)",
|
|
"doc_type": "dsfa_list",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_dsfa_corpus",
|
|
"sort_order": 6
|
|
},
|
|
{
|
|
"code": "DSFA_BB_OE",
|
|
"name": "DSFA Brandenburg oeffentlich",
|
|
"full_name": "LDA Brandenburg DSFA-Liste oeffentlich (Art. 35 Abs. 4 DSGVO)",
|
|
"doc_type": "dsfa_list",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_dsfa_corpus",
|
|
"sort_order": 7
|
|
},
|
|
{
|
|
"code": "DSFA_BB_NOE",
|
|
"name": "DSFA Brandenburg nicht-oeffentlich",
|
|
"full_name": "LDA Brandenburg DSFA-Liste nicht-oeffentlich (Art. 35 Abs. 4 DSGVO)",
|
|
"doc_type": "dsfa_list",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_dsfa_corpus",
|
|
"sort_order": 8
|
|
},
|
|
{
|
|
"code": "DSFA_HB",
|
|
"name": "DSFA Bremen",
|
|
"full_name": "LfDI Bremen DSFA-Liste (Art. 35 Abs. 4 DSGVO)",
|
|
"doc_type": "dsfa_list",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_dsfa_corpus",
|
|
"sort_order": 9
|
|
},
|
|
{
|
|
"code": "DSFA_HH_OE",
|
|
"name": "DSFA Hamburg oeffentlich",
|
|
"full_name": "HmbBfDI Hamburg DSFA-Liste oeffentlich (Art. 35 Abs. 4 DSGVO)",
|
|
"doc_type": "dsfa_list",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_dsfa_corpus",
|
|
"sort_order": 10
|
|
},
|
|
{
|
|
"code": "DSFA_HH_NOE",
|
|
"name": "DSFA Hamburg nicht-oeffentlich",
|
|
"full_name": "HmbBfDI Hamburg DSFA-Liste nicht-oeffentlich (Art. 35 Abs. 4 DSGVO)",
|
|
"doc_type": "dsfa_list",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_dsfa_corpus",
|
|
"sort_order": 11
|
|
},
|
|
{
|
|
"code": "DSFA_MV",
|
|
"name": "DSFA Mecklenburg-Vorpommern",
|
|
"full_name": "LfDI Mecklenburg-Vorpommern DSFA-Liste (Art. 35 Abs. 4 DSGVO)",
|
|
"doc_type": "dsfa_list",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_dsfa_corpus",
|
|
"sort_order": 12
|
|
},
|
|
{
|
|
"code": "DSFA_NI",
|
|
"name": "DSFA Niedersachsen",
|
|
"full_name": "LfD Niedersachsen DSFA-Liste (Art. 35 Abs. 4 DSGVO)",
|
|
"doc_type": "dsfa_list",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_dsfa_corpus",
|
|
"sort_order": 13
|
|
},
|
|
{
|
|
"code": "DSFA_RP",
|
|
"name": "DSFA Rheinland-Pfalz",
|
|
"full_name": "LfDI Rheinland-Pfalz DSFA-Liste (Art. 35 Abs. 4 DSGVO)",
|
|
"doc_type": "dsfa_list",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_dsfa_corpus",
|
|
"sort_order": 14
|
|
},
|
|
{
|
|
"code": "DSFA_SL",
|
|
"name": "DSFA Saarland",
|
|
"full_name": "UDZ Saarland DSFA-Liste (Art. 35 Abs. 4 DSGVO)",
|
|
"doc_type": "dsfa_list",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_dsfa_corpus",
|
|
"sort_order": 15
|
|
},
|
|
{
|
|
"code": "DSFA_SN",
|
|
"name": "DSFA Sachsen",
|
|
"full_name": "SDTB Sachsen DSFA-Liste (Art. 35 Abs. 4 DSGVO)",
|
|
"doc_type": "dsfa_list",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_dsfa_corpus",
|
|
"sort_order": 16
|
|
},
|
|
{
|
|
"code": "DSFA_ST_OE",
|
|
"name": "DSFA Sachsen-Anhalt oeffentlich",
|
|
"full_name": "LfD Sachsen-Anhalt DSFA-Liste oeffentlich (Art. 35 Abs. 4 DSGVO)",
|
|
"doc_type": "dsfa_list",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_dsfa_corpus",
|
|
"sort_order": 17
|
|
},
|
|
{
|
|
"code": "DSFA_ST_NOE",
|
|
"name": "DSFA Sachsen-Anhalt nicht-oeffentlich",
|
|
"full_name": "LfD Sachsen-Anhalt DSFA-Liste nicht-oeffentlich (Art. 35 Abs. 4 DSGVO)",
|
|
"doc_type": "dsfa_list",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_dsfa_corpus",
|
|
"sort_order": 18
|
|
},
|
|
{
|
|
"code": "DSFA_SH",
|
|
"name": "DSFA Schleswig-Holstein",
|
|
"full_name": "ULD Schleswig-Holstein DSFA-Liste (Art. 35 Abs. 4 DSGVO)",
|
|
"doc_type": "dsfa_list",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_dsfa_corpus",
|
|
"sort_order": 19
|
|
},
|
|
{
|
|
"code": "DSFA_TH",
|
|
"name": "DSFA Thueringen",
|
|
"full_name": "TLfDI Thueringen DSFA-Liste (Art. 35 Abs. 4 DSGVO)",
|
|
"doc_type": "dsfa_list",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_dsfa_corpus",
|
|
"sort_order": 20
|
|
},
|
|
{
|
|
"code": "NIST_CSF_2",
|
|
"name": "NIST CSF 2.0",
|
|
"full_name": "NIST Cybersecurity Framework (CSF) 2.0",
|
|
"doc_type": "nist_standard",
|
|
"description": "Version 2.0 des NIST Cybersecurity Framework. Neue Kernfunktion Govern ergaenzt Identify, Protect, Detect, Respond, Recover.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"effective_date": "26. Februar 2024",
|
|
"sort_order": 1,
|
|
"applicability_note": "Gilt fuer alle Branchen. Allgemeines Cybersicherheits-Rahmenwerk anwendbar auf jede Organisation unabhaengig von Branche."
|
|
},
|
|
{
|
|
"code": "NIST_PF_1",
|
|
"name": "NIST Privacy Framework 1.0",
|
|
"full_name": "NIST Privacy Framework 1.0",
|
|
"doc_type": "nist_standard",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 2
|
|
},
|
|
{
|
|
"code": "NIST_SSDF",
|
|
"name": "NIST SSDF",
|
|
"full_name": "NIST SP 800-218 — Secure Software Development Framework (SSDF)",
|
|
"doc_type": "nist_standard",
|
|
"description": "NIST-Framework fuer sichere Softwareentwicklung. Definiert Praktiken und Aufgaben in vier Gruppen: Prepare, Protect, Produce, Respond.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"effective_date": "3. Februar 2022",
|
|
"sort_order": 3,
|
|
"applicability_note": "Gilt fuer alle Branchen. Jedes Unternehmen das Software entwickelt — ob Maschinensteuerung, Fahrzeug-Firmware oder Kunden-Portal."
|
|
},
|
|
{
|
|
"code": "NISTIR_8259A",
|
|
"name": "NISTIR 8259A",
|
|
"full_name": "NISTIR 8259A — IoT Device Cybersecurity Capability Core Baseline",
|
|
"doc_type": "nist_standard",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 4,
|
|
"applicability_note": "Gilt fuer alle Branchen. IoT-Sicherheitsbaseline fuer jeden Hersteller vernetzter Geraete."
|
|
},
|
|
{
|
|
"code": "NIST_AI_RMF",
|
|
"name": "NIST AI RMF 1.0",
|
|
"full_name": "NIST AI RMF 1.0 — AI Risk Management Framework",
|
|
"doc_type": "nist_standard",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 5
|
|
},
|
|
{
|
|
"code": "NIST_SP_800_30",
|
|
"name": "NIST SP 800-30",
|
|
"full_name": "NIST SP 800-30 Rev. 1 — Guide for Conducting Risk Assessments",
|
|
"doc_type": "nist_standard",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"sort_order": 6
|
|
},
|
|
{
|
|
"code": "NIST_SP_800_53",
|
|
"name": "NIST SP 800-53 Rev. 5",
|
|
"full_name": "NIST SP 800-53 Rev. 5 — Security and Privacy Controls",
|
|
"doc_type": "nist_standard",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 7
|
|
},
|
|
{
|
|
"code": "NIST_SP_800_63_3",
|
|
"name": "NIST SP 800-63-3",
|
|
"full_name": "NIST SP 800-63-3 — Digital Identity Guidelines",
|
|
"doc_type": "nist_standard",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 8
|
|
},
|
|
{
|
|
"code": "NIST_SP_800_82",
|
|
"name": "NIST SP 800-82",
|
|
"full_name": "NIST SP 800-82 Rev. 3 — Guide to OT Security",
|
|
"doc_type": "nist_standard",
|
|
"industries": [
|
|
"maschinenbau",
|
|
"automotive",
|
|
"elektrotechnik",
|
|
"chemie",
|
|
"energie",
|
|
"metall"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"sort_order": 9,
|
|
"applicability_note": "Sektorspezifisch: Branchen mit Operational Technology (OT) — Maschinenbau, Automotive, Elektrotechnik, Chemie, Energie, Metall."
|
|
},
|
|
{
|
|
"code": "NIST_SP_800_160",
|
|
"name": "NIST SP 800-160",
|
|
"full_name": "NIST SP 800-160 Vol. 1 Rev. 1 — Engineering Trustworthy Secure Systems",
|
|
"doc_type": "nist_standard",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"sort_order": 10
|
|
},
|
|
{
|
|
"code": "NIST_SP_800_207",
|
|
"name": "NIST SP 800-207",
|
|
"full_name": "NIST SP 800-207 — Zero Trust Architecture",
|
|
"doc_type": "nist_standard",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 11,
|
|
"applicability_note": "Gilt fuer alle Branchen. Zero-Trust-Architektur als Sicherheitskonzept fuer alle Unternehmensnetzwerke."
|
|
},
|
|
{
|
|
"code": "OWASP_TOP10_2021",
|
|
"name": "OWASP Top 10 (2021)",
|
|
"full_name": "OWASP Top 10 (2021)",
|
|
"doc_type": "owasp_standard",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 1,
|
|
"applicability_note": "Gilt fuer alle Branchen. Jedes Unternehmen das Webanwendungen oder SaaS-Produkte betreibt muss die OWASP Top 10 beachten."
|
|
},
|
|
{
|
|
"code": "OWASP_API_SECURITY_2023",
|
|
"name": "OWASP API Security Top 10 (2023)",
|
|
"full_name": "OWASP API Security Top 10 (2023)",
|
|
"doc_type": "owasp_standard",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 2
|
|
},
|
|
{
|
|
"code": "OWASP_ASVS",
|
|
"name": "OWASP ASVS",
|
|
"full_name": "OWASP Application Security Verification Standard (ASVS)",
|
|
"doc_type": "owasp_standard",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 3
|
|
},
|
|
{
|
|
"code": "OWASP_MASVS",
|
|
"name": "OWASP MASVS",
|
|
"full_name": "OWASP Mobile Application Security Verification Standard (MASVS)",
|
|
"doc_type": "owasp_standard",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 4
|
|
},
|
|
{
|
|
"code": "OWASP_MOBILE_TOP10",
|
|
"name": "OWASP Mobile Top 10",
|
|
"full_name": "OWASP Mobile Top 10",
|
|
"doc_type": "owasp_standard",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 5
|
|
},
|
|
{
|
|
"code": "OWASP_SAMM",
|
|
"name": "OWASP SAMM",
|
|
"full_name": "OWASP Software Assurance Maturity Model (SAMM)",
|
|
"doc_type": "owasp_standard",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 6
|
|
},
|
|
{
|
|
"code": "CISA_SBD",
|
|
"name": "CISA Secure by Design",
|
|
"full_name": "CISA Secure by Design — Principles and Approaches",
|
|
"doc_type": "enisa_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"sort_order": 1,
|
|
"applicability_note": "Gilt fuer alle Branchen. Secure-by-Design-Prinzipien betreffen jeden Hersteller von Produkten mit digitalen Elementen."
|
|
},
|
|
{
|
|
"code": "ENISA_ICS_SCADA",
|
|
"name": "ENISA ICS/SCADA",
|
|
"full_name": "ENISA ICS/SCADA Kommunikationsnetzwerk-Abhaengigkeiten",
|
|
"doc_type": "enisa_guidance",
|
|
"industries": [
|
|
"maschinenbau",
|
|
"elektrotechnik",
|
|
"automotive",
|
|
"chemie",
|
|
"energie",
|
|
"transport"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"sort_order": 2,
|
|
"applicability_note": "Sektorspezifisch: Alle Branchen mit industrieller Steuerungstechnik — Maschinenbau, Elektrotechnik, Automotive, Chemie, Energie, Transport."
|
|
},
|
|
{
|
|
"code": "ENISA_SUPPLY_CHAIN",
|
|
"name": "ENISA Supply Chain Security",
|
|
"full_name": "ENISA Good Practices fuer Supply Chain Cybersecurity",
|
|
"doc_type": "enisa_guidance",
|
|
"description": "ENISA-Analyse der Bedrohungslandschaft fuer Supply-Chain-Angriffe. Beschreibt Angriffsvektoren, Taxonomie und Empfehlungen zur Absicherung von Software-Lieferketten.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"effective_date": "2021",
|
|
"sort_order": 3,
|
|
"applicability_note": "Gilt fuer alle Branchen. Lieferkettensicherheit ist im Rahmen von CRA und NIS2 fuer alle Hersteller relevant."
|
|
},
|
|
{
|
|
"code": "ENISA_THREAT_LANDSCAPE",
|
|
"name": "ENISA Threat Landscape SC",
|
|
"full_name": "ENISA Threat Landscape fuer Supply Chain Attacks",
|
|
"doc_type": "enisa_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"sort_order": 4
|
|
},
|
|
{
|
|
"code": "ENISA_CYBERSECURITY_2024",
|
|
"name": "ENISA Cybersecurity State 2024",
|
|
"full_name": "ENISA Bericht zum Stand der Cybersicherheit in der EU 2024",
|
|
"doc_type": "enisa_guidance",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"sort_order": 5
|
|
},
|
|
{
|
|
"code": "CVSS_V4",
|
|
"name": "CVSS v4.0",
|
|
"full_name": "CVSS v4.0 — Common Vulnerability Scoring System",
|
|
"doc_type": "international",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"sort_order": 1,
|
|
"applicability_note": "Gilt fuer alle Branchen. Schwachstellenbewertung ist Pflicht im Rahmen des CRA fuer alle Hersteller vernetzter Produkte."
|
|
},
|
|
{
|
|
"code": "CYCLONEDX_1_6",
|
|
"name": "CycloneDX 1.6",
|
|
"full_name": "CycloneDX 1.6 — SBOM Standard (ECMA-424)",
|
|
"doc_type": "international",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"sort_order": 2,
|
|
"applicability_note": "Gilt fuer alle Branchen. SBOM-Standard — der CRA verlangt von allen Herstellern eine Software-Stueckliste."
|
|
},
|
|
{
|
|
"code": "FDA_HFE",
|
|
"name": "FDA Human Factors Engineering",
|
|
"full_name": "FDA Human Factors Engineering — Medical Devices",
|
|
"doc_type": "international",
|
|
"industries": [],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"sort_order": 3,
|
|
"applicability_note": "Nicht zutreffend fuer produzierende Industrie in der EU. FDA-Anforderungen gelten fuer US-Medizinprodukte."
|
|
},
|
|
{
|
|
"code": "OECD_AI_PRINCIPLES",
|
|
"name": "OECD AI Principles",
|
|
"full_name": "OECD Recommendation on Artificial Intelligence (AI Principles)",
|
|
"doc_type": "international",
|
|
"description": "OECD-Empfehlung zu Kuenstlicher Intelligenz. Definiert fuenf Prinzipien fuer verantwortungsvolle KI: Inklusives Wachstum, Menschenzentrierte Werte, Transparenz, Robustheit und Rechenschaftspflicht.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"effective_date": "22. Mai 2019",
|
|
"sort_order": 4,
|
|
"applicability_note": "Gilt fuer alle Branchen. OECD-KI-Prinzipien sind branchenuebergreifend anwendbar auf jeden KI-Einsatz."
|
|
},
|
|
{
|
|
"code": "OPENTELEMETRY",
|
|
"name": "OpenTelemetry",
|
|
"full_name": "OpenTelemetry Specification — Observability Framework",
|
|
"doc_type": "international",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"sort_order": 5
|
|
},
|
|
{
|
|
"code": "SLSA_V1",
|
|
"name": "SLSA v1.0",
|
|
"full_name": "SLSA v1.0 — Supply-chain Levels for Software Artifacts",
|
|
"doc_type": "international",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"sort_order": 6,
|
|
"applicability_note": "Gilt fuer alle Branchen. Supply-Chain-Integritaet fuer alle Unternehmen die Software bauen und ausliefern."
|
|
},
|
|
{
|
|
"code": "SPDX_3",
|
|
"name": "SPDX 3.0",
|
|
"full_name": "SPDX 3.0.1 — Software Package Data Exchange",
|
|
"doc_type": "international",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"sort_order": 7,
|
|
"applicability_note": "Gilt fuer alle Branchen. SBOM-Standard fuer Software-Lizenz- und Abhaengigkeitsdokumentation."
|
|
},
|
|
{
|
|
"code": "BFDI_VVT",
|
|
"name": "BfDI Beispiel-VVT",
|
|
"full_name": "BfDI Beispiel-VVT mit Loeschfristen",
|
|
"doc_type": "legal_template",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_legal_templates",
|
|
"sort_order": 1
|
|
},
|
|
{
|
|
"code": "DSK_KP5_DSFA_TEMPLATE",
|
|
"name": "DSK KP5 DSFA",
|
|
"full_name": "DSK Kurzpapier Nr. 5 Datenschutz-Folgenabschaetzung (Vorlage)",
|
|
"doc_type": "legal_template",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_legal_templates",
|
|
"sort_order": 2
|
|
},
|
|
{
|
|
"code": "DSK_MUSTER_VVT",
|
|
"name": "DSK Muster-VVT",
|
|
"full_name": "DSK Muster-VVT (Art. 30 DSGVO)",
|
|
"doc_type": "legal_template",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_legal_templates",
|
|
"sort_order": 3
|
|
},
|
|
{
|
|
"code": "OPRVC_MUSTERTEXTE",
|
|
"name": "Datenschutz Mustertexte (oprvc)",
|
|
"full_name": "10 Datenschutz Mustertexte kostenlos (oprvc)",
|
|
"doc_type": "legal_template",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_legal_templates",
|
|
"sort_order": 4
|
|
},
|
|
{
|
|
"code": "OPRVC_DSE",
|
|
"name": "Datenschutzerklaerung (oprvc)",
|
|
"full_name": "Muster-Datenschutzerklaerung (oprvc)",
|
|
"doc_type": "legal_template",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_legal_templates",
|
|
"sort_order": 5
|
|
},
|
|
{
|
|
"code": "OPRVC_IMPRESSUM",
|
|
"name": "Impressum Muster (oprvc)",
|
|
"full_name": "Muster-Impressum (oprvc)",
|
|
"doc_type": "legal_template",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_legal_templates",
|
|
"sort_order": 6
|
|
},
|
|
{
|
|
"code": "WEBFLORIST_PRIVACY_POLICY",
|
|
"name": "Privacy Policy Generator (webflorist)",
|
|
"full_name": "Webflorist Privacy Policy Text Generator (6 Dokumente)",
|
|
"doc_type": "legal_template",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_legal_templates",
|
|
"sort_order": 7
|
|
},
|
|
{
|
|
"code": "DATENNUTZUNGSKLAUSELN",
|
|
"name": "Datennutzungsklauseln Muster",
|
|
"full_name": "Datennutzungsklauseln-Muster (OpenCode, 3 Dokumente)",
|
|
"doc_type": "legal_template",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_legal_templates",
|
|
"sort_order": 8
|
|
},
|
|
{
|
|
"code": "TEMPEST_TOS_GENERATOR",
|
|
"name": "ToS Generator (Tempest)",
|
|
"full_name": "Terms of Service Generator (Tempest Solutions, 5 Dokumente)",
|
|
"doc_type": "legal_template",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_legal_templates",
|
|
"sort_order": 9
|
|
},
|
|
{
|
|
"code": "TEMPEST_PRIVACY_GENERATOR",
|
|
"name": "Privacy Policy Generator (Tempest)",
|
|
"full_name": "Privacy Policy Generator (Tempest Solutions)",
|
|
"doc_type": "legal_template",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_legal_templates",
|
|
"sort_order": 10
|
|
},
|
|
{
|
|
"code": "TEMPEST_COOKIE_BANNER",
|
|
"name": "Cookie Banner (Tempest)",
|
|
"full_name": "Cookie Banner Consent Solution (Tempest Solutions)",
|
|
"doc_type": "legal_template",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_legal_templates",
|
|
"sort_order": 11
|
|
},
|
|
{
|
|
"code": "COOKIECONSENT",
|
|
"name": "CookieConsent Library",
|
|
"full_name": "CookieConsent Library (orestbida, 12 Dokumente)",
|
|
"doc_type": "legal_template",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_legal_templates",
|
|
"sort_order": 12
|
|
},
|
|
{
|
|
"code": "COMMONPAPER_CSA",
|
|
"name": "CommonPaper CSA",
|
|
"full_name": "CommonPaper Cloud Service Agreement (CSA)",
|
|
"doc_type": "legal_template",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_legal_templates",
|
|
"sort_order": 13
|
|
},
|
|
{
|
|
"code": "COMMONPAPER_PSA",
|
|
"name": "CommonPaper PSA",
|
|
"full_name": "CommonPaper Professional Services Agreement (PSA)",
|
|
"doc_type": "legal_template",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_legal_templates",
|
|
"sort_order": 14
|
|
},
|
|
{
|
|
"code": "COMMONPAPER_SLA",
|
|
"name": "CommonPaper SLA",
|
|
"full_name": "CommonPaper Service Level Agreement (SLA)",
|
|
"doc_type": "legal_template",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_legal_templates",
|
|
"sort_order": 15
|
|
},
|
|
{
|
|
"code": "GITHUB_SITE_POLICY",
|
|
"name": "GitHub Site Policies",
|
|
"full_name": "GitHub Site Policies (47 Dokumente)",
|
|
"doc_type": "legal_template",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_legal_templates",
|
|
"sort_order": 16
|
|
},
|
|
{
|
|
"code": "OPENGOVFOUNDATION_POLICIES",
|
|
"name": "OpenGov Foundation Site Policies",
|
|
"full_name": "OpenGov Foundation Site Policies (3 Dokumente)",
|
|
"doc_type": "legal_template",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_legal_templates",
|
|
"sort_order": 17
|
|
},
|
|
{
|
|
"code": "SCC_FULL_TEXT",
|
|
"name": "SCC Volltext",
|
|
"full_name": "Standardvertragsklauseln Volltext (2021/914/EU)",
|
|
"doc_type": "eu_regulation",
|
|
"description": "Vollstaendiger Text der EU-Standardvertragsklauseln fuer internationale Datentransfers. Alle Module (C2C, C2P, P2C, P2P) mit Annexen.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"effective_date": "27. Juni 2021",
|
|
"sort_order": 20,
|
|
"applicability_note": "Gilt fuer alle Branchen. Vollstaendiger Vertragstext der Standardvertragsklauseln fuer internationale Datentransfers."
|
|
},
|
|
{
|
|
"code": "EU_IFRS_DE",
|
|
"name": "EU-IFRS (DE)",
|
|
"full_name": "Verordnung (EU) 2023/1803 — IFRS (deutsche Fassung)",
|
|
"doc_type": "eu_regulation",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"sort_order": 21
|
|
},
|
|
{
|
|
"code": "EU_IFRS_EN",
|
|
"name": "EU-IFRS (EN)",
|
|
"full_name": "Verordnung (EU) 2023/1803 — IFRS (englische Fassung)",
|
|
"doc_type": "eu_regulation",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"sort_order": 22
|
|
},
|
|
{
|
|
"code": "AT_DSG_FULL",
|
|
"name": "DSG Volltext AT",
|
|
"full_name": "Datenschutzgesetz Oesterreich — Volltext",
|
|
"doc_type": "at_law",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"sort_order": 11
|
|
},
|
|
{
|
|
"code": "DE_BGB_AGB_305",
|
|
"name": "BGB AGB-Recht §§305-310",
|
|
"full_name": "BGB §§ 305-310 — AGB-Recht",
|
|
"doc_type": "de_law",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"sort_order": 36
|
|
},
|
|
{
|
|
"code": "DE_BGB_FERNABSATZ",
|
|
"name": "BGB Fernabsatz §§312-312k",
|
|
"full_name": "BGB §§ 312-312k — Fernabsatzvertraege",
|
|
"doc_type": "de_law",
|
|
"industries": [
|
|
"handel",
|
|
"konsumgueter"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"sort_order": 37
|
|
},
|
|
{
|
|
"code": "DE_BGB_KAUFRECHT",
|
|
"name": "BGB Kaufrecht §§433-480",
|
|
"full_name": "BGB §§ 433-480 — Kaufrecht",
|
|
"doc_type": "de_law",
|
|
"industries": [
|
|
"handel",
|
|
"konsumgueter"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"sort_order": 38
|
|
},
|
|
{
|
|
"code": "DE_BGB_WIDERRUF",
|
|
"name": "BGB Widerruf §§355-361",
|
|
"full_name": "BGB §§ 355-361 — Widerrufsrecht",
|
|
"doc_type": "de_law",
|
|
"industries": [
|
|
"handel",
|
|
"konsumgueter"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"sort_order": 39
|
|
},
|
|
{
|
|
"code": "DE_BGB_DIGITAL",
|
|
"name": "BGB Digital §§327-327u",
|
|
"full_name": "BGB §§ 327-327u — Digitale Produkte",
|
|
"doc_type": "de_law",
|
|
"industries": [
|
|
"handel",
|
|
"konsumgueter",
|
|
"elektrotechnik"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"sort_order": 40
|
|
},
|
|
{
|
|
"code": "DE_EGBGB_WIDERRUF",
|
|
"name": "EGBGB Widerrufsbelehrung",
|
|
"full_name": "EGBGB — Muster-Widerrufsbelehrung",
|
|
"doc_type": "de_law",
|
|
"industries": [
|
|
"handel",
|
|
"konsumgueter"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_gesetze",
|
|
"sort_order": 41
|
|
},
|
|
{
|
|
"code": "EDPB_GUIDELINES_5_2020",
|
|
"name": "EDPB GL Einwilligung (5/2020)",
|
|
"full_name": "EDPB Leitlinien 05/2020 zur Einwilligung (alt)",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 42
|
|
},
|
|
{
|
|
"code": "EDPB_GUIDELINES_1_2020",
|
|
"name": "EDPB GL Fahrzeuge (1/2020)",
|
|
"full_name": "EDPB Leitlinien 01/2020 — Vernetzte Fahrzeuge",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 43
|
|
},
|
|
{
|
|
"code": "EDPB_GUIDELINES_1_2022",
|
|
"name": "EDPB GL Bussgelder (1/2022)",
|
|
"full_name": "EDPB Leitlinien 04/2022 zur Berechnung von Bussgeldern",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 44
|
|
},
|
|
{
|
|
"code": "EDPB_GUIDELINES_2_2023",
|
|
"name": "EDPB GL Art. 37 Scope (2/2023)",
|
|
"full_name": "EDPB Leitlinien 02/2023 — Art. 37 Anwendungsbereich",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 45
|
|
},
|
|
{
|
|
"code": "EDPB_GUIDELINES_2_2024",
|
|
"name": "EDPB GL Art. 48 (2/2024)",
|
|
"full_name": "EDPB Leitlinien 02/2024 — Art. 48",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 46
|
|
},
|
|
{
|
|
"code": "EDPB_GUIDELINES_4_2019",
|
|
"name": "EDPB GL Art. 25 DPbD (4/2019)",
|
|
"full_name": "EDPB Leitlinien 04/2019 — Art. 25 Data Protection by Design",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 47
|
|
},
|
|
{
|
|
"code": "EDPB_GUIDELINES_9_2022",
|
|
"name": "EDPB GL Datenschutzverletzung (9/2022)",
|
|
"full_name": "EDPB Leitlinien 09/2022 — Datenschutzverletzung",
|
|
"doc_type": "edpb_guideline",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"sort_order": 48
|
|
},
|
|
{
|
|
"code": "EDPB_GUIDELINES_2_2019",
|
|
"name": "EDPB GL Art. 6(1)(b) (2/2019)",
|
|
"full_name": "EDPB Leitlinien 2/2019 zu Art. 6(1)(b) DSGVO",
|
|
"doc_type": "edpb_guideline",
|
|
"description": "EDPB-Leitlinien zur Verarbeitung personenbezogener Daten auf Grundlage der Vertragserfullung gemaess Art. 6 Abs. 1 lit. b DSGVO.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"effective_date": "2019",
|
|
"sort_order": 49,
|
|
"applicability_note": "Gilt fuer alle Branchen. Rechtsgrundlage Vertragserfullung ist fuer alle datenverarbeitenden Unternehmen relevant."
|
|
},
|
|
{
|
|
"code": "EDPB_GUIDELINES_3_2019",
|
|
"name": "EDPB GL Videoueberwachung (3/2019)",
|
|
"full_name": "EDPB Leitlinien 3/2019 Videoueberwachung",
|
|
"doc_type": "edpb_guideline",
|
|
"description": "EDPB-Leitlinien zur Verarbeitung personenbezogener Daten durch Videoueberwachungsgeraete.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_datenschutz",
|
|
"effective_date": "2020",
|
|
"sort_order": 50,
|
|
"applicability_note": "Gilt fuer alle Branchen. Videoueberwachung kann in jedem Unternehmen eingesetzt werden."
|
|
},
|
|
{
|
|
"code": "ENISA_SECURE_BY_DESIGN",
|
|
"name": "ENISA Secure by Design",
|
|
"full_name": "ENISA Secure Software Development Best Practices",
|
|
"doc_type": "enisa_guidance",
|
|
"description": "ENISA-Leitfaden fuer sichere Softwareentwicklung. Beschreibt Best Practices fuer Security by Design, sichere Entwicklungsprozesse und Schwachstellenmanagement.",
|
|
"industries": [
|
|
"all"
|
|
],
|
|
"in_rag": true,
|
|
"rag_collection": "bp_compliance_ce",
|
|
"effective_date": "2023",
|
|
"sort_order": 6,
|
|
"applicability_note": "Gilt fuer alle Branchen. Sichere Softwareentwicklung betrifft jeden Hersteller digitaler Produkte."
|
|
}
|
|
]
|
|
} |