{"id":1587,"date":"2023-07-14T11:04:27","date_gmt":"2023-07-14T11:04:27","guid":{"rendered":"https:\/\/gb25.eco.de\/cyber-security-services\/"},"modified":"2026-05-07T07:23:21","modified_gmt":"2026-05-07T07:23:21","slug":"cyber-security-services","status":"publish","type":"page","link":"https:\/\/gb25.eco.de\/en\/services-initiatives\/cyber-security-services\/","title":{"rendered":"Cyber Security Services"},"content":{"rendered":"\n
\"\"<\/figure>\n\n\n\n

Cyber Security Services<\/h1>\n\n\n\n
\n
\n

eco External Data Protection Officer<\/h2>\n\n\n\n

Our \u201ceco External Data Protection Officer<\/a>\u201d service is specifically designed to offer small and medium-sized member companies support from eco\u2019s experts in data protection. Our aim is to help companies continuously adapt their business processes to ever-changing data protection requirements. This includes, among other things, assistance with the introduction of new processing procedures as well as the organisation of workshops to sensitise employees to data protection issues.<\/p>\n\n\n\n

Advantages of an External Data Protection Officer<\/h2>\n\n\n\n

Companies from the telecommunications and Internet industry are a particular focus of data protection authorities, as data processing in these sectors is associated with significant risks. A number of member companies have therefore decided to avail of the eco External Data Protection Officer service. This not only allows them to conserve internal resources and avoid potential conflicts of interest, but also to outsource existing liability risks.<\/p>\n\n\n\n

In 2025, eco\u2019s data protection experts continued to support subscribers to the service in implementing current regulatory developments in data protection.<\/p>\n<\/div>\n\n\n\n

\n
\"\"<\/figure>\n<\/div>\n<\/div>\n\n\n\n
\n
\n

Implementation of Regulatory Developments \u2013 Focus on AI<\/h2>\n\n\n\n

A key focus was on the implementation of the EU AI Regulation (AI Act), the requirements of which are now gradually coming into force. Companies must, in particular, carry out risk classifications of their AI systems, fulfil transparency obligations, establish internal control mechanisms and expand their documentation processes. eco\u2019s External Data Protection Officers provided support in evaluating existing and planned AI applications from a data protection perspective, accompanied the adaptation of internal compliance structures and worked towards establishing compliant and data protection-compliant use cases.<\/p>\n\n\n\n

International Data Transfers and Third-Country References<\/h2>\n\n\n\n

In 2025, international data transfers remained a central focus of European data protection supervisory authorities. Companies were required to ensure that transfers to third countries \u2013 particularly in connection with the use of global cloud and AI services \u2013 were legally compliant and continuously reviewed. The existing guidelines of the European Data Protection Board on international data transfers, as well as on Transfer Impact Assessments (TIA) and supplementary safeguards, remained decisive. eco\u2019s External Data Protection Officers supported the evaluation of existing service provider structures and the adjustment of contracts and transfer mechanisms.<\/p>\n\n\n\n

Data Protection Organisation and Governance<\/h2>\n\n\n\n

Another focus was on the further development of internal data protection management systems. eco\u2019s External Data Protection Officers provided support in:<\/p>\n\n\n\n