The organisation resulting in the light of compliance is complemented by hedging levels in decision-making processes and throughout the supervisory organisation.
Rechtsanwalt Dipl.-Ing. Michael Horak, LL.M.
Compliance with applicable laws
The main goal of a compliance organization is to comply with all applicable laws and rules throughout the Group. The organisation should guarantee the best possible advice and support in all areas of the Group.
We advise and support you on all compliance issues.
Local contact
For a globally operating company, a global network of local contact persons should ensure compliance with the standards and support implementation. A local contact person sets the Compliance programme together with local management.
Information flow
A smooth regular flow of information between the Executive Board and the Compliance Officer transmits the current status of the compliance management system and its further development to a company's top management.
We're professionals. Use a first consultation with us.
Operational – Process organisation
The operational part of the compliance management system is the compliance organization in which the systematic processes of the compliance program take place. These include the elevations, expert opinions and inspections of the information collected.
From the storage of files through a reporting system to monitoring and control, numerous compliance processes are required for the operational process. It also includes internal regulations and document management. Other aspects of the process organisation are, such as reporting to the management and clear guidelines for ad hoc reporting or how a compliance incident should be managed.
From a seminar for beginners to training on the way to Compliance specialist we offer different levels.
Indicative system
With a whistleblowing system, checks and monitoring are carried out within a company.
Business units such as the HR department, the Legal department or the Compliance department are suitable as reporting centres. In these departments, the expertise for the task is best to be found. Confidentiality and speed are the characteristics that are important for a notifier to function successfully. The employee who reports something should remain anonymous. In order to ensure identity protection, no evidence of its identity may be disclosed.
The larger a company, the more employee reporting points there should be.
Rechtsanwalt Dipl.-Ing. Michael Horak, LL.M.
-
First German EPPO convictions for participation in organized VAT crime
On 23 October 2026, the Düsseldorf Regional Court sentenced two parties to several years of imprisonment in the international tax fraud complex "Operation Goliath". According to the European Public Prosecutor's Office (EPPO), these are the first convictions in a German EPPO case, in which a court found that the accused had participated in a criminal organisation. The case shows how tight...
-
Antitrust proceedings: ECJ confirms acquisition by the EU Commission in respect of corporate restructuring
ECJ, Judgments of 1 October 2026, C-855/24 P (Crown Holdings) and C-845/24 P (Silgan Holdings) When the cartel investigation changes to the EU Commission Companies cannot rely on a trial that has been started at the Federal Cartel Office to be completed there. On 1 October 2026, the European Court of Justice confirmed that the European Commission had initiated antitrust proceedings under certain...
-
ECJ: Banks must first reimburse unauthorised debits for phishing victims
Judgment of the European Court of Justice of 15 October 2026 – C-70/25, Tukowiecka Banks and other payment service providers may not refuse or delay the reimbursement of unauthorized payment transactions solely because they accuse the customer of gross negligence. The European Court of Justice (ECJ) has clarified this in the case of Tukowiecka. The decision is particularly applicable to complaint management, fraud prevention and...
-
Cyber Resilience Act 2026: Organize Product Incidents and Notifications
Manufacturers of digital products need to work together on security incidents in both legal and technical terms. A prepared reporting process combines product knowledge, incident response and clear decisions.
-
AI-Compliance 2026: Controlled release of operational applications
An AI application can affect several legal areas at the same time. A release process must therefore consider the role, function, data and actual use.
-
Compliance 2026 – What you need to know today
Compliance law covers many areas. In 2026, compliance is not only a legal obligation but also a competitive factor. Key topics include: Data protection and IT compliance: As digitalisation progresses, companies must ensure that the processing of personal data is lawful. DSGVO obligations include, as well as secure data transmission, access rights, data retention and reporting requirements for data protection violations. Antitrust and competition law: companies...
-
Compliance Annual Planning 2026: Determine Responsibilities and Controls
A good annual planning begins with the events in which a breach of law can have significant consequences. For medium-sized companies, clear managers and few reliably executed controls are often more valuable than an ever longer manual.
-
Common sense and compliance manual
Mr Weber holds the new compliance manual in his hands. Two centimeters thick, cleanly bound, full of references to guidelines, processes and responsibilities. He leaves, nods, sighs. "Actually logical, he thinks. And that's exactly where the story of common sense begins in everyday business. If rules explain everything, but don't prevent anything On Monday morning, Mr Weber is facing a decision...
-
Internal and external communication – the underestimated core of effective compliance
Good compliance is not only based on policies, checklists and processes. She lives on communication. From people who understand what is important – and who know how to act. But this is where many companies fail: rules exist, but no one knows them. Responsibilities are defined, but no one feels responsible. And in case of emergency, it's not going to be said that...
-
Overview of developments in compliance law 2025
2025 is characterized by accompanying regulations: Sustainability, digital security, AI governance and data protection are the focus. Those who create risk-oriented structures in good time and digitally anchored compliance minimize sanctions and increase reputation. Supply chain compliance & sustainability reporting The EU Deforestation Regulation will apply from 30 December 2025 – strict rules against illegal grubbing-up, and SMEs must also be careful. The Battery Ordinance (mandatory from 18 August 2025) and...