{ "schema": "https://saferpage.de/schemas/regulatory-alert-routing.v1", "generated_at": "2026-06-10T09:56:24+00:00", "domain": "kzvmv.de", "available": true, "scan": { "id": "0b3a1f20-76bf-4692-9b98-c9e5678d9c25", "checked_at": "2026-06-10 06:36:55.204779+02" }, "summary": "Alert-Routing fuer kzvmv.de: 13 regulatorische Alerts, 6 Watch-Abos, 6 Impact-Regeln.", "digest": { "alert_count": 13, "subscription_count": 6, "impact_rule_count": 6, "source_count": 9, "official_source_count": 5, "priority_counts": { "kritisch": 5, "hoch": 7, "mittel": 1, "niedrig": 0 } }, "subscriptions": [ { "id": "dach_eprivacy_tracking", "name": "DACH ePrivacy und Tracking", "jurisdictions": [ "DE", "AT", "CH", "EU" ], "topics": [ "TDDDG", "ePrivacy", "Cookies", "Consent Mode", "GPC" ], "cadence": "taeglich bei Alerts, monatlich als Review", "owner": "Marketing/IT/Datenschutz" }, { "id": "eu_privacy_core", "name": "EU Datenschutz-Kernpflichten", "jurisdictions": [ "EU" ], "topics": [ "DSGVO", "EDPB", "EUR-Lex", "Betroffenenrechte", "DSFA" ], "cadence": "woechentlich bei Aenderungen", "owner": "Datenschutz/Legal" }, { "id": "security_tom", "name": "Websicherheit und TOM", "jurisdictions": [ "DE", "EU" ], "topics": [ "BSI", "TLS", "CSP", "Security Header", "Nachweise" ], "cadence": "quartalsweise plus Release-Gate", "owner": "IT/Security" }, { "id": "vendor_transfer", "name": "Anbieter und Drittlandtransfer", "jurisdictions": [ "EU", "Drittland" ], "topics": [ "DPA/AVV", "SCC", "TIA", "Subprozessoren" ], "cadence": "monatlich und bei Anbieterwechsel", "owner": "Datenschutz/Einkauf/IT" }, { "id": "accessibility_bfsg", "name": "Barrierefreiheit und BFSG", "jurisdictions": [ "DE", "EU" ], "topics": [ "BFSG", "WCAG", "Nutzerrechte" ], "cadence": "quartalsweise", "owner": "UX/IT/Datenschutz" }, { "id": "ai_governance", "name": "KI und Profiling", "jurisdictions": [ "EU" ], "topics": [ "AI Act", "Profiling", "Chatbots", "Automatisierte Entscheidungen" ], "cadence": "monatlich und bei neuem Use Case", "owner": "Product/Datenschutz/Legal" } ], "impact_rules": [ { "id": "eu_dsgvo_privacy_ops", "jurisdiction": "EU/DACH", "topic": "DSGVO, Betroffenenrechte, Notice, DSFA", "keywords": [ "dsgvo", "gdpr", "edpb", "eur-lex", "notice", "betroffenenrechte", "dsar", "dsfa", "dpia" ], "impacted_centers": [ "https://saferpage.de/datenschutz/kzvmv.de/entwurf", "https://saferpage.de/rechte/kzvmv.de", "https://saferpage.de/assessment/kzvmv.de/workflow-json", "https://saferpage.de/dsfa/kzvmv.de" ], "owner": "Datenschutz/Legal", "default_priority": "hoch", "next_step": "Pflichtaenderung gegen Datenschutzhinweis, DSAR-Prozess und Assessment-Workflow pruefen.", "evidence_required": "Quelle, betroffene Textstelle, betroffene SaferPage-Befunde, Entscheidung und Re-Scan-ID." }, { "id": "de_tdddg_eprivacy_tracking", "jurisdiction": "DE/EU", "topic": "TDDDG, ePrivacy, Cookies, Consent, GPC", "keywords": [ "tdddg", "eprivacy", "cookie", "cookies", "consent", "tracking", "gpc", "cmp" ], "impacted_centers": [ "https://saferpage.de/consent/kzvmv.de", "https://saferpage.de/cookies/kzvmv.de", "https://saferpage.de/consent-banner/kzvmv.de/blocking-json", "https://saferpage.de/consent/kzvmv.de/framework-json" ], "owner": "Marketing/IT/Datenschutz", "default_priority": "kritisch", "next_step": "Consent-Default, Auto-Blocking, Cookie-Katalog und GPC-Verhalten vor dem naechsten Release abgleichen.", "evidence_required": "Consent-Screenshot, Cookie-Diff, Script-Blocking-Nachweis, CMP-Version und Test-URL." }, { "id": "security_tom_bsi", "jurisdiction": "DE/EU", "topic": "Security, TOM, TLS, BSI", "keywords": [ "security", "tom", "bsi", "tls", "csp", "header", "sicherheit" ], "impacted_centers": [ "https://saferpage.de/technik/kzvmv.de", "https://saferpage.de/nachweise/kzvmv.de", "https://saferpage.de/kontrollen/kzvmv.de" ], "owner": "IT/Security", "default_priority": "hoch", "next_step": "Technische Schutzmassnahmen, Header, TLS und Evidence Pack gegen die neue Anforderung pruefen.", "evidence_required": "Header-/TLS-Auszug, Kontrolltest, Change-Ticket und Nachweislink." }, { "id": "accessibility_bfsg", "jurisdiction": "DE/EU", "topic": "BFSG, WCAG, Barrierefreiheit", "keywords": [ "bfsg", "wcag", "accessibility", "barrierefreiheit" ], "impacted_centers": [ "https://saferpage.de/barrierefreiheit/kzvmv.de", "https://saferpage.de/datenschutz-hub/kzvmv.de" ], "owner": "UX/IT/Datenschutz", "default_priority": "mittel", "next_step": "Consent-, Datenschutz- und DSAR-Flows auf Bedienbarkeit, Kontrast, Tastatur und klare Sprache pruefen.", "evidence_required": "WCAG/BFSG-Testnotiz, betroffene URLs, Screenshot und Entscheidung." }, { "id": "vendor_transfer_due_diligence", "jurisdiction": "EU/Drittland", "topic": "Anbieter, Drittlandtransfer, TIA, SCC", "keywords": [ "vendor", "anbieter", "transfer", "drittland", "tia", "scc", "subprozessor" ], "impacted_centers": [ "https://saferpage.de/anbieter/kzvmv.de/due-diligence", "https://saferpage.de/transfer/kzvmv.de", "https://saferpage.de/verarbeitungen/kzvmv.de" ], "owner": "Datenschutz/Einkauf/IT", "default_priority": "hoch", "next_step": "Anbieterinventar, AVV/DPA, Transfermechanismus und TIA-Entscheidung aktualisieren.", "evidence_required": "Anbieterkarte, DPA/AVV-Link, Transferbewertung, Subprozessoren und Restrisikoentscheidung." }, { "id": "ai_governance", "jurisdiction": "EU", "topic": "KI, Profiling, Automatisierung", "keywords": [ "ki", "ai", "profiling", "automatisierung", "chatbot" ], "impacted_centers": [ "https://saferpage.de/ki/kzvmv.de", "https://saferpage.de/dsfa/kzvmv.de", "https://saferpage.de/assessment/kzvmv.de/workflow-json" ], "owner": "Product/Datenschutz/Legal", "default_priority": "hoch", "next_step": "KI-/Profiling-Use-Case, Transparenz, Rechtsgrundlage, DSFA-Schwelle und Vendor-Setup bewerten.", "evidence_required": "Use-Case-Beschreibung, Datenarten, Modell-/Vendor-Info, DSFA-Entscheidung und Nutzerhinweis." } ], "routing_rules": [ { "when": "priority=kritisch", "route_to": [ "Datenschutz/Legal", "IT/Marketing" ], "sla_hours": 48, "reminder_after_hours": 24, "escalate_after_hours": 72 }, { "when": "priority=hoch", "route_to": [ "Datenschutz/Legal", "Website-Betrieb" ], "sla_hours": 120, "reminder_after_hours": 72, "escalate_after_hours": 168 }, { "when": "topic contains Vendor or Transfer", "route_to": [ "Datenschutz", "Einkauf", "IT" ], "sla_hours": 168, "reminder_after_hours": 96, "escalate_after_hours": 240 }, { "when": "Release betrifft Cookies, CMP, Anbieter, Formular oder KI", "route_to": [ "Release-Owner", "Datenschutz" ], "sla_hours": 24, "reminder_after_hours": 12, "escalate_after_hours": 36 } ], "notification_channels": { "email": { "subject_template": "[SaferPage] {priority} Regulatory Alert fuer kzvmv.de", "recipient_group": "privacy-ops@betreiber.example", "body_fields": [ "title", "topic", "source_url", "next_step", "impacted_centers" ] }, "slack": { "channel": "#privacy-ops", "payload_template": { "text": "{title}", "blocks": [ "priority", "topic", "source_url", "next_step" ] } }, "teams": { "webhook_name": "Privacy Ops Alerts", "payload_template": { "title": "{title}", "summary": "{next_step}", "sections": [ "Evidence", "Impacted Centers" ] } }, "webhook": { "method": "POST", "content_type": "application/json", "signature_header": "X-SaferPage-Signature", "idempotency_header": "Idempotency-Key" }, "rss": { "feed_url": "https://saferpage.de/regulatory-watch/kzvmv.de/alerts-json", "item_key": "dedupe_key" } }, "alerts": [ { "id": "reg-alert-01", "title": "DSK Orientierungshilfe digitale Dienste fuer kzvmv.de bewerten", "jurisdiction": "DE/EU", "topic": "TDDDG, ePrivacy, Cookies, Consent, GPC", "priority": "kritisch", "status": "routing-ready", "source_url": "https://www.datenschutzkonferenz-online.de/media/oh/OH_Digitale_Dienste.pdf", "source_name": "DSK Orientierungshilfe digitale Dienste", "impacted_centers": [ "https://saferpage.de/consent/kzvmv.de", "https://saferpage.de/cookies/kzvmv.de", "https://saferpage.de/consent-banner/kzvmv.de/blocking-json", "https://saferpage.de/consent/kzvmv.de/framework-json" ], "owner": "Marketing/IT/Datenschutz", "due_in_days": 7, "next_step": "Consent-Default, Auto-Blocking, Cookie-Katalog und GPC-Verhalten vor dem naechsten Release abgleichen.", "evidence_required": "Consent-Screenshot, Cookie-Diff, Script-Blocking-Nachweis, CMP-Version und Test-URL.", "dedupe_key": "f9e40720b0294729ae63cb553ee1f51d89ce2e01f24856b2dd76e66d2af4091c" }, { "id": "reg-alert-02", "title": "DSGVO Art. 6 fuer kzvmv.de bewerten", "jurisdiction": "EU/DACH", "topic": "DSGVO, Betroffenenrechte, Notice, DSFA", "priority": "hoch", "status": "routing-ready", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_name": "DSGVO Art. 6", "impacted_centers": [ "https://saferpage.de/datenschutz/kzvmv.de/entwurf", "https://saferpage.de/rechte/kzvmv.de", "https://saferpage.de/assessment/kzvmv.de/workflow-json", "https://saferpage.de/dsfa/kzvmv.de" ], "owner": "Datenschutz/Legal", "due_in_days": 14, "next_step": "Pflichtaenderung gegen Datenschutzhinweis, DSAR-Prozess und Assessment-Workflow pruefen.", "evidence_required": "Quelle, betroffene Textstelle, betroffene SaferPage-Befunde, Entscheidung und Re-Scan-ID.", "dedupe_key": "3e89d5f955efdbac68243445ae5cfd81fbe636ff3aa9c5f3df6685778b5fcb36" }, { "id": "reg-alert-03", "title": "BSI TLS-Mindeststandard und IT-Grundschutz Webserver/Webanwendungen fuer kzvmv.de bewerten", "jurisdiction": "DE/EU", "topic": "Security, TOM, TLS, BSI", "priority": "hoch", "status": "routing-ready", "source_url": "https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Mindeststandards/Mindeststandard_BSI_TLS_Version_2_3.pdf", "source_name": "BSI TLS-Mindeststandard und IT-Grundschutz Webserver/Webanwendungen", "impacted_centers": [ "https://saferpage.de/technik/kzvmv.de", "https://saferpage.de/nachweise/kzvmv.de", "https://saferpage.de/kontrollen/kzvmv.de" ], "owner": "IT/Security", "due_in_days": 14, "next_step": "Technische Schutzmassnahmen, Header, TLS und Evidence Pack gegen die neue Anforderung pruefen.", "evidence_required": "Header-/TLS-Auszug, Kontrolltest, Change-Ticket und Nachweislink.", "dedupe_key": "51b7a0031e48ac1a65f302202b597ffe55f4bd3dd55423d0cf13b40b708946ab" }, { "id": "reg-alert-04", "title": "Google Consent Mode Dokumentation fuer kzvmv.de bewerten", "jurisdiction": "DE/EU", "topic": "TDDDG, ePrivacy, Cookies, Consent, GPC", "priority": "kritisch", "status": "routing-ready", "source_url": "https://developers.google.com/tag-platform/security/concepts/consent-mode", "source_name": "Google Consent Mode Dokumentation", "impacted_centers": [ "https://saferpage.de/consent/kzvmv.de", "https://saferpage.de/cookies/kzvmv.de", "https://saferpage.de/consent-banner/kzvmv.de/blocking-json", "https://saferpage.de/consent/kzvmv.de/framework-json" ], "owner": "Marketing/IT/Datenschutz", "due_in_days": 7, "next_step": "Consent-Default, Auto-Blocking, Cookie-Katalog und GPC-Verhalten vor dem naechsten Release abgleichen.", "evidence_required": "Consent-Screenshot, Cookie-Diff, Script-Blocking-Nachweis, CMP-Version und Test-URL.", "dedupe_key": "f74f91f62eafa41fbc941a743760ff7e66d63b0222c85892cf524f0dc352e6da" }, { "id": "reg-alert-05", "title": "WCAG 2.2 / BFIT / European Accessibility Act fuer kzvmv.de bewerten", "jurisdiction": "DE/EU", "topic": "TDDDG, ePrivacy, Cookies, Consent, GPC", "priority": "kritisch", "status": "routing-ready", "source_url": "https://www.w3.org/TR/WCAG22/", "source_name": "WCAG 2.2 / BFIT / European Accessibility Act", "impacted_centers": [ "https://saferpage.de/consent/kzvmv.de", "https://saferpage.de/cookies/kzvmv.de", "https://saferpage.de/consent-banner/kzvmv.de/blocking-json", "https://saferpage.de/consent/kzvmv.de/framework-json" ], "owner": "Marketing/IT/Datenschutz", "due_in_days": 7, "next_step": "Consent-Default, Auto-Blocking, Cookie-Katalog und GPC-Verhalten vor dem naechsten Release abgleichen.", "evidence_required": "Consent-Screenshot, Cookie-Diff, Script-Blocking-Nachweis, CMP-Version und Test-URL.", "dedupe_key": "72ac74f958783d84bb573268cb504c425eb0914321c85d231ecef1e9d796e0ff" }, { "id": "reg-alert-06", "title": "BFSG/WCAG fuer kzvmv.de bewerten", "jurisdiction": "DE/EU", "topic": "BFSG, WCAG, Barrierefreiheit", "priority": "mittel", "status": "routing-ready", "source_url": "/guides/barrierefreiheit-cookie-banner-formulare", "source_name": "BFSG/WCAG", "impacted_centers": [ "https://saferpage.de/barrierefreiheit/kzvmv.de", "https://saferpage.de/datenschutz-hub/kzvmv.de" ], "owner": "UX/IT/Datenschutz", "due_in_days": 30, "next_step": "Consent-, Datenschutz- und DSAR-Flows auf Bedienbarkeit, Kontrast, Tastatur und klare Sprache pruefen.", "evidence_required": "WCAG/BFSG-Testnotiz, betroffene URLs, Screenshot und Entscheidung.", "dedupe_key": "8444a41f1606a6a43abbe149ee43b1b4badab939f69ac38666c5d7ab95d4bc1b" }, { "id": "reg-alert-07", "title": "BSI/Security fuer kzvmv.de bewerten", "jurisdiction": "DE/EU", "topic": "Security, TOM, TLS, BSI", "priority": "hoch", "status": "routing-ready", "source_url": "/guides/security-header-setzen", "source_name": "BSI/Security", "impacted_centers": [ "https://saferpage.de/technik/kzvmv.de", "https://saferpage.de/nachweise/kzvmv.de", "https://saferpage.de/kontrollen/kzvmv.de" ], "owner": "IT/Security", "due_in_days": 14, "next_step": "Technische Schutzmassnahmen, Header, TLS und Evidence Pack gegen die neue Anforderung pruefen.", "evidence_required": "Header-/TLS-Auszug, Kontrolltest, Change-Ticket und Nachweislink.", "dedupe_key": "ff7b49e1b1b91b53db54c69447a855f2e460bc253aac7eb8ece6003d9e7de4fb" }, { "id": "reg-alert-08", "title": "DSGVO fuer kzvmv.de bewerten", "jurisdiction": "EU/DACH", "topic": "DSGVO, Betroffenenrechte, Notice, DSFA", "priority": "hoch", "status": "routing-ready", "source_url": "/guides/datenschutzerklaerung-verbessern", "source_name": "DSGVO", "impacted_centers": [ "https://saferpage.de/datenschutz/kzvmv.de/entwurf", "https://saferpage.de/rechte/kzvmv.de", "https://saferpage.de/assessment/kzvmv.de/workflow-json", "https://saferpage.de/dsfa/kzvmv.de" ], "owner": "Datenschutz/Legal", "due_in_days": 14, "next_step": "Pflichtaenderung gegen Datenschutzhinweis, DSAR-Prozess und Assessment-Workflow pruefen.", "evidence_required": "Quelle, betroffene Textstelle, betroffene SaferPage-Befunde, Entscheidung und Re-Scan-ID.", "dedupe_key": "da5f7c0b16fc1c2de240971401da1d37e4f51d7c128f6ab0a8ccb4c4347a6625" }, { "id": "reg-alert-09", "title": "TDDDG/ePrivacy fuer kzvmv.de bewerten", "jurisdiction": "DE/EU", "topic": "TDDDG, ePrivacy, Cookies, Consent, GPC", "priority": "kritisch", "status": "routing-ready", "source_url": "/guides/tracking-und-consent-reparieren", "source_name": "TDDDG/ePrivacy", "impacted_centers": [ "https://saferpage.de/consent/kzvmv.de", "https://saferpage.de/cookies/kzvmv.de", "https://saferpage.de/consent-banner/kzvmv.de/blocking-json", "https://saferpage.de/consent/kzvmv.de/framework-json" ], "owner": "Marketing/IT/Datenschutz", "due_in_days": 7, "next_step": "Consent-Default, Auto-Blocking, Cookie-Katalog und GPC-Verhalten vor dem naechsten Release abgleichen.", "evidence_required": "Consent-Screenshot, Cookie-Diff, Script-Blocking-Nachweis, CMP-Version und Test-URL.", "dedupe_key": "53ff96942b85bcd62e9a6a2cc51637669527efb5973ef278c3a7aa33fceffffd" }, { "id": "reg-gap-01", "title": "Befunde auf Pflichten und Guides rueckverfolgbar schliessen", "jurisdiction": "EU/DACH", "topic": "DSGVO, Betroffenenrechte, Notice, DSFA", "priority": "hoch", "status": "operator-action-needed", "source_url": "https://saferpage.de/guides/datenschutz-webseiten-pruefkatalog", "source_name": "SaferPage Gap", "impacted_centers": [ "https://saferpage.de/datenschutz/kzvmv.de/entwurf", "https://saferpage.de/rechte/kzvmv.de", "https://saferpage.de/assessment/kzvmv.de/workflow-json", "https://saferpage.de/dsfa/kzvmv.de" ], "owner": "Datenschutz/Legal", "due_in_days": 14, "next_step": "Jeden kritischen Befund mit Quelle, Pflicht, Evidence, Owner und Behebungs-Guide verbinden.", "evidence_required": "2 Rechtsgrundlagenzeile(n), 9 Quellenzeile(n).", "dedupe_key": "930c74ec19bfaf39cfb9085642080daeddbe72d6d8be2be6ca26d18f3e7d0271" }, { "id": "reg-gap-02", "title": "Wiederholungsscans und Change-Alerts angebunden schliessen", "jurisdiction": "DE/EU", "topic": "TDDDG, ePrivacy, Cookies, Consent, GPC", "priority": "kritisch", "status": "operator-action-needed", "source_url": "https://saferpage.de/monitoring", "source_name": "SaferPage Gap", "impacted_centers": [ "https://saferpage.de/consent/kzvmv.de", "https://saferpage.de/cookies/kzvmv.de", "https://saferpage.de/consent-banner/kzvmv.de/blocking-json", "https://saferpage.de/consent/kzvmv.de/framework-json" ], "owner": "Marketing/IT/Datenschutz", "due_in_days": 7, "next_step": "Regulatorische Pruefpunkte bei neuen Cookies, Anbietern, Formularen, AI-/Profiling-Use-Cases und Rechtsaenderungen erneut bewerten.", "evidence_required": "Alerts 0.", "dedupe_key": "49f3dad08f5d5e5c445fcc27ef12bfbdecb55c82eddfc2e15dbe61527d4e8032" }, { "id": "reg-gap-03", "title": "Owner und Review-Kadenz definiert schliessen", "jurisdiction": "DE/EU", "topic": "Security, TOM, TLS, BSI", "priority": "hoch", "status": "operator-action-needed", "source_url": "https://saferpage.de/betreiber/kzvmv.de", "source_name": "SaferPage Gap", "impacted_centers": [ "https://saferpage.de/technik/kzvmv.de", "https://saferpage.de/nachweise/kzvmv.de", "https://saferpage.de/kontrollen/kzvmv.de" ], "owner": "IT/Security", "due_in_days": 14, "next_step": "Legal/DSB, Website-Betrieb, Marketing, Security und Product als feste Owner fuer regulatorische Aenderungen benennen.", "evidence_required": "Aus oeffentlichem Scan nicht beweisbar.", "dedupe_key": "fdbfbea641db669312a737f54b430eb4d7d858b73404f8b8b7c5a9a92e7edd17" }, { "id": "reg-gap-04", "title": "Quellenstand und Auswirkungsbewertung versioniert schliessen", "jurisdiction": "EU", "topic": "KI, Profiling, Automatisierung", "priority": "hoch", "status": "operator-action-needed", "source_url": "https://saferpage.de/nachweise/kzvmv.de", "source_name": "SaferPage Gap", "impacted_centers": [ "https://saferpage.de/ki/kzvmv.de", "https://saferpage.de/dsfa/kzvmv.de", "https://saferpage.de/assessment/kzvmv.de/workflow-json" ], "owner": "Product/Datenschutz/Legal", "due_in_days": 14, "next_step": "Quelle, Abrufdatum, betroffene Domains, geaenderte Pflicht und Umsetzungsticket versionieren.", "evidence_required": "Aus oeffentlichem Scan nicht beweisbar.", "dedupe_key": "9192f6845382ac7a5f4b34308765cf672e578f43978250f4768d12270d85b873" } ], "links": { "watch_center": "https://saferpage.de/regulatory-watch/kzvmv.de", "alerts_json": "https://saferpage.de/regulatory-watch/kzvmv.de/alerts-json", "alerts_csv": "https://saferpage.de/regulatory-watch/kzvmv.de/alerts-csv", "digest_md": "https://saferpage.de/regulatory-watch/kzvmv.de/digest-md", "assessment_workflow": "https://saferpage.de/assessment/kzvmv.de/workflow-json", "operator_board": "https://saferpage.de/betreiber/kzvmv.de", "monitoring": "https://saferpage.de/monitoring/domain/kzvmv.de", "regulatory_scorecard": "https://saferpage.de/regelwerke/kzvmv.de" }, "disclaimer": "Automatisch erzeugtes Routing-Paket. Es sendet keine Nachrichten selbststaendig und ersetzt keine Rechtsberatung." }