Digitised workflows touch obligations that used to be handled on paper. This category sets out what applies: retention periods and process documentation under German accounting principles, data protection for staff and customer data, works council codetermination for systems capable of recording behaviour or performance, and the IT security requirements that reach smaller companies through supply chains. It also covers funding options for digitisation projects and what paperwork an application requires. Written factually and without offering legal advice — assessing a specific case remains a matter for a lawyer.
Which field is missing on the item, how packaging weights per variant and shipping carton are maintained, and how delivery note quantities become a defensible reported tonnage per material type.
An access request starts a one-month deadline: what the response has to cover, where the data actually sits and what should remain provable afterwards.
Written form, electronic form, text form: which signature level satisfies which statutory form, and where the law keeps the electronic form excluded.
Four methods, one inventory: how far the counting day may sit from the closing date, which deadlines apply and which data work has to happen first.
From 12 September 2026 new connected products must release operating data by default. Which deadlines apply, who is exempt and what to prepare now.
From 11 September 2026 the reporting duty in Article 14 applies. Who reports to whom, what happens in the first 24 hours and which records remain at the end.
How access is ready on the first working day and reliably ends after someone leaves: taking stock, roles, a trigger from the HR system, annual review.
Cost over five years, availability, responsibility during incidents, data protection and getting data back — how mid-sized firms decide where their servers run.
Process documentation under the German GoBD rules: the four required parts, how detailed it must be, how to keep it current and what its absence can mean.
Several copies, one off site, one without a permanent connection: how firms set recovery time and tolerable data loss, and how to test restores for real.
Sign-in, key handling, encryption in transit, minimal permissions, separate test accounts and key rotation: what to settle for every interface you run.
Grants, subsidised loans, consulting subsidies: what German funding covers, which documents an application needs and why it must precede any binding order.
The revised network and information security directive: who is in scope, how supply chains pull in smaller firms and what can be prepared before transposition.
When the works council has a say on time recording, vehicle tracking and reporting, why mere suitability is enough, and what belongs in a works agreement.
Data protection in a digitisation project: the record of processing, a legal basis per operation, processor contracts, access rights, deletion and measures.