{"id":73412,"date":"2026-08-05T22:34:14","date_gmt":"2026-08-05T20:34:14","guid":{"rendered":"http:\/\/adiumento.local\/?page_id=73412"},"modified":"2026-08-05T22:34:14","modified_gmt":"2026-08-05T20:34:14","slug":"datenschutz-informationsschutz","status":"publish","type":"page","link":"https:\/\/adiumento.de\/en\/themen\/regulatorik-sicher-umsetzen\/datenschutz-informationsschutz\/","title":{"rendered":"Data protection & information protection"},"content":{"rendered":"
\"Datenschutz<\/span>

\u2190 Implement regulatory requirements securely<\/a><\/p>

Data protection & information protection<\/h1>

Protect personal and sensitive information with clear rules, effective controls and an operable model.<\/strong><\/p><\/div><\/div>\n\n\n\n

Data protection primarily answers whether and under what conditions personal data may be processed. Information protection ensures that data \u2013 personal or business critical \u2013 remains appropriately classified, accessible, protected and available. Both come together in data flows, access rights, technical and organisational measures (TOMs) and traceable operating processes.<\/p>\n<\/div>\n\n\n

Relationship to services and technologies<\/h2>\n\n
\"Datenschutz<\/figure>
\n

The focus is on protection needs, control objectives and evidence. Specific Microsoft technologies and their introduction are in Technology context<\/a> and at IT Security & Compliance<\/a> described.<\/p>\n<\/div><\/div>\n\n\n<\/div>\n\n\n

Background<\/h2>\n\n

Data now resides in specialist applications, email, collaboration and cloud services. Without a common picture of data types, responsibilities and protection needs, approvals on demand, unclear filings and exceptions that are difficult to check arise. Pure guidelines won't solve this; nor does a product replace the professional decision about the purpose, legal basis or need for protection.<\/p>\n<\/div>\n\n\n

Technical context<\/h2>\n\n
\"Abstrakte<\/figure>
\n

The GDPR is the data protection framework for personal data. Information protection also considers the confidentiality, integrity and availability of all relevant information. TOMs combine both perspectives: They translate risks into organisational and technical protective measures. The concrete IT and cloud practice is covered GDPR in IT and cloud<\/a>; the structure of the technical and organisational measures<\/a> and Datenklassifizierung & Purview<\/a> are standalone in-depth topics.<\/p>\n<\/div><\/div>\n\n\n<\/div>\n\n\n

Typical starting questions<\/h2>\n\n
\n\n
Which cloud processing, service providers and data flows need to be clarified?<\/summary>

Relevant in-depth topic:<\/strong> GDPR in IT and cloud<\/a><\/p><\/details>\n\n

How are TOMs documented and checked in a risk-oriented manner?<\/summary>

Relevant in-depth topic:<\/strong> Technical and organisational measures<\/a><\/p><\/details>\n\n

How to classify and protect data in Microsoft 365?<\/summary>

Relevant in-depth topic:<\/strong> Data classification and Microsoft Purview<\/a><\/p><\/details>\n<\/div>\n\n<\/div>\n\n\n

What companies need to clarify specifically<\/h2>\n\n
\"Managementteam<\/figure>
\n