We write when something changes for regulated institutions.

Personnel security under the KRITIS-DachG and Art. 14 CER Directive: how operators implement background checks in a risk-based, audit-proof way.

KRITIS-Dachgesetz 2026 in force: sectors, obligations and deadlines at a glance — and what applies if the 17 July 2026 registration deadline was missed.

Understand the differences between EU, OFAC, and UN sanctions lists, when each applies, and how to build a defensible screening process for KYC/AML compliance.

What § 6 (2) no. 5 GwG requires of banks and insurers: the statutory definition of reliability, screening triggers and typical implementation gaps.

Security clearance vs. own screening: what SÜG, LuftSiG and AtZüV cover — and what employers must check themselves under KRITIS-DachG and BSIG.

A clean Führungszeugnis is no proof of integrity: which entries are missing under the BZRG and when a structured background check closes the gap.

SÜG amendment in force since 16 Jan 2026: changes to Ü1, Ü2 and Ü3, mandatory internet research even at Ü1 — and the consequences for companies.

§ 30 BSIG demands personnel security and access control: what NIS2 entities must implement now and why § 38 BSIG targets senior management.

After CJEU C-34/21, § 26 BDSG alone no longer carries screening: how to map screening categories to Art. 6 GDPR — with checklist and balancing test.

BaFin's fit-and-proper assessment: what §§ 25c, 25d and 24 KWG require of executive directors and supervisory boards, and how to prepare the notification.

Why software alone is not enough for fit-and-proper and reliability decisions: the hybrid approach for decisions you can defend.

One-time check or continuous monitoring? When the point-in-time check is no longer enough: GwG duties, GDPR limits and a decision matrix.

Interim managers and external providers slip through every screening grid: GDPR legal bases, DORA duties and a screening framework for externals.

Social media screening of applicants: permitted on LinkedIn and Xing, off-limits for private profiles. Legal framework, DSK line and information duties.

Works council and background checks: classify §§ 94, 95, 87 BetrVG and use co-determination as an opportunity — with key points for the works agreement.

Background checks in Switzerland: what Art. 328b OR and the revFADP permit, which limits apply and what a lawful, tiered screening depth looks like.

LkSG amendment and postponed CSDDD: why the due-diligence duties persist and what really applies to your supplier due diligence in 2026.

How often people lie on their CVs, what a bad hire really costs and why pre-hire verification is a business case.

Applicants may lie to inadmissible questions without consequence: what employers may ask in Germany and how to screen lawfully instead.

The security officer’s duties under SÜG, GHB and VSA — and why pre-selection before the clearance request rests with the company.

KRITIS operators in energy, water and health: which role needs which screening depth — state-run, internal or software report. A decision guide.

AtZüV in brief: Who is vetted under § 12b AtG in decommissioning, interim storage and transport — and which questions remain open for employers and contractors.

Personnel security screening under ISG and PSPV: screening levels, consent — and why private employers without a federal nexus need their own screening.

Requirements catalogue for background check software in banks: review categories, DACH sources, data protection concept and audit-proof documentation.

What the ZÜP under § 7 LuftSiG checks — and what it does not: CV claims, foreign offences and ongoing conduct remain the employer's task. An overview.

How the anti-money laundering officer sets up employee screening under § 6 (2) no. 5 GwG: risk classes, review cycles and audit-proof documentation.

§ 24 VAG: who is vetted for reliability at insurers, which GwG duties apply to life insurers and how the two regimes fit together.

What Regulation (EU) 2022/2554 requires for training, due diligence and contracts with third-party ICT providers — an overview.

What § 26 BDSG permits in pre-employment screening at banks: lawful sources, proportionality by position, and the limits set by data protection law.

Internal perpetrators exploit legitimate access and system knowledge. Which safeguards § 25h KWG, § 6 GwG and MaRisk AT 7.1 require of banks.

KYC is standard, Know Your Employee often is not: why employee vetting under § 6(2) no. 5 GwG ranks equally and how to implement it.

When executive search skips structured background checks, the real cost shows up months later — in reputation damage, regulatory exposure, and board-level crises that a structured check from €79 can surface in time.

What adverse media screening actually is, how it fits into your compliance framework, and why automated screening without human assessment creates more risk than it removes.

A practical breakdown of what background checks actually cover, how they differ from simple database lookups, and why they're essential for meeting KYC obligations under the GwG and EU AML directives.