{ "schema": "https://saferpage.de/schemas/regulatory-alert-routing.v1", "generated_at": "2026-07-04T08:38:54+00:00", "domain": "open2chat.at", "available": true, "scan": { "id": "c6b7022b-e1c8-42fd-b6db-ac73c3ea3b61", "checked_at": "2026-07-01 22:01:46.365138+02" }, "summary": "Alert-Routing für open2chat.at: 13 regulatorische Alerts, 6 Watch-Abos, 6 Impact-Regeln.", "digest": { "alert_count": 13, "subscription_count": 6, "impact_rule_count": 6, "source_count": 10, "official_source_count": 6, "priority_counts": { "kritisch": 5, "hoch": 7, "mittel": 1, "niedrig": 0 } }, "subscriptions": [ { "id": "dach_eprivacy_tracking", "name": "DACH ePrivacy und Tracking", "jurisdictions": [ "DE", "AT", "CH", "EU" ], "topics": [ "TDDDG", "ePrivacy", "Cookies", "Consent Mode", "GPC" ], "cadence": "täglich bei Alerts, monatlich als Review", "owner": "Marketing/IT/Datenschutz" }, { "id": "eu_privacy_core", "name": "EU Datenschutz-Kernpflichten", "jurisdictions": [ "EU" ], "topics": [ "DSGVO", "EDPB", "EUR-Lex", "Betroffenenrechte", "DSFA" ], "cadence": "woechentlich bei Änderungen", "owner": "Datenschutz/Legal" }, { "id": "security_tom", "name": "Websicherheit und TOM", "jurisdictions": [ "DE", "EU" ], "topics": [ "BSI", "TLS", "CSP", "Security Header", "Nachweise" ], "cadence": "quartalsweise plus Release-Gate", "owner": "IT/Security" }, { "id": "vendor_transfer", "name": "Anbieter und Drittlandtransfer", "jurisdictions": [ "EU", "Drittland" ], "topics": [ "DPA/AVV", "SCC", "TIA", "Subprozessoren" ], "cadence": "monatlich und bei Anbieterwechsel", "owner": "Datenschutz/Einkauf/IT" }, { "id": "accessibility_bfsg", "name": "Barrierefreiheit und BFSG", "jurisdictions": [ "DE", "EU" ], "topics": [ "BFSG", "WCAG", "Nutzerrechte" ], "cadence": "quartalsweise", "owner": "UX/IT/Datenschutz" }, { "id": "ai_governance", "name": "KI und Profiling", "jurisdictions": [ "EU" ], "topics": [ "AI Act", "Profiling", "Chatbots", "Automatisierte Entscheidungen" ], "cadence": "monatlich und bei neuem Use Case", "owner": "Product/Datenschutz/Legal" } ], "impact_rules": [ { "id": "eu_dsgvo_privacy_ops", "jurisdiction": "EU/DACH", "topic": "DSGVO, Betroffenenrechte, Notice, DSFA", "keywords": [ "dsgvo", "gdpr", "edpb", "eur-lex", "notice", "betroffenenrechte", "dsar", "dsfa", "dpia" ], "impacted_centers": [ "https://saferpage.de/datenschutz/open2chat.at/entwurf", "https://saferpage.de/rechte/open2chat.at", "https://saferpage.de/assessment/open2chat.at/workflow-json", "https://saferpage.de/dsfa/open2chat.at" ], "owner": "Datenschutz/Legal", "default_priority": "hoch", "next_step": "Pflichtänderung gegen Datenschutzhinweis, DSAR-Prozess und Assessment-Workflow prüfen.", "evidence_required": "Quelle, betroffene Textstelle, betroffene SaferPage-Befunde, Entscheidung und Re-Scan-ID." }, { "id": "de_tdddg_eprivacy_tracking", "jurisdiction": "DE/EU", "topic": "TDDDG, ePrivacy, Cookies, Consent, GPC", "keywords": [ "tdddg", "eprivacy", "cookie", "cookies", "consent", "tracking", "gpc", "cmp" ], "impacted_centers": [ "https://saferpage.de/consent/open2chat.at", "https://saferpage.de/cookies/open2chat.at", "https://saferpage.de/consent-banner/open2chat.at/blocking-json", "https://saferpage.de/consent/open2chat.at/framework-json" ], "owner": "Marketing/IT/Datenschutz", "default_priority": "kritisch", "next_step": "Consent-Default, Auto-Blocking, Cookie-Katalog und GPC-Verhalten vor dem nächsten Release abgleichen.", "evidence_required": "Consent-Screenshot, Cookie-Diff, Script-Blocking-Nachweis, CMP-Version und Test-URL." }, { "id": "security_tom_bsi", "jurisdiction": "DE/EU", "topic": "Security, TOM, TLS, BSI", "keywords": [ "security", "tom", "bsi", "tls", "csp", "header", "sicherheit" ], "impacted_centers": [ "https://saferpage.de/technik/open2chat.at", "https://saferpage.de/nachweise/open2chat.at", "https://saferpage.de/kontrollen/open2chat.at" ], "owner": "IT/Security", "default_priority": "hoch", "next_step": "Technische Schutzmaßnahmen, Header, TLS und Evidence Pack gegen die neue Anforderung prüfen.", "evidence_required": "Header-/TLS-Auszug, Kontrolltest, Change-Ticket und Nachweislink." }, { "id": "accessibility_bfsg", "jurisdiction": "DE/EU", "topic": "BFSG, WCAG, Barrierefreiheit", "keywords": [ "bfsg", "wcag", "accessibility", "barrierefreiheit" ], "impacted_centers": [ "https://saferpage.de/barrierefreiheit/open2chat.at", "https://saferpage.de/datenschutz-hub/open2chat.at" ], "owner": "UX/IT/Datenschutz", "default_priority": "mittel", "next_step": "Consent-, Datenschutz- und DSAR-Flows auf Bedienbarkeit, Kontrast, Tastatur und klare Sprache prüfen.", "evidence_required": "WCAG/BFSG-Testnotiz, betroffene URLs, Screenshot und Entscheidung." }, { "id": "vendor_transfer_due_diligence", "jurisdiction": "EU/Drittland", "topic": "Anbieter, Drittlandtransfer, TIA, SCC", "keywords": [ "vendor", "anbieter", "transfer", "drittland", "tia", "scc", "subprozessor" ], "impacted_centers": [ "https://saferpage.de/anbieter/open2chat.at/due-diligence", "https://saferpage.de/transfer/open2chat.at", "https://saferpage.de/verarbeitungen/open2chat.at" ], "owner": "Datenschutz/Einkauf/IT", "default_priority": "hoch", "next_step": "Anbieterinventar, AVV/DPA, Transfermechanismus und TIA-Entscheidung aktualisieren.", "evidence_required": "Anbieterkarte, DPA/AVV-Link, Transferbewertung, Subprozessoren und Restrisikoentscheidung." }, { "id": "ai_governance", "jurisdiction": "EU", "topic": "KI, Profiling, Automatisierung", "keywords": [ "ki", "ai", "profiling", "automatisierung", "chatbot" ], "impacted_centers": [ "https://saferpage.de/ki/open2chat.at", "https://saferpage.de/dsfa/open2chat.at", "https://saferpage.de/assessment/open2chat.at/workflow-json" ], "owner": "Product/Datenschutz/Legal", "default_priority": "hoch", "next_step": "KI-/Profiling-Use-Case, Transparenz, Rechtsgrundlage, DSFA-Schwelle und Vendor-Setup bewerten.", "evidence_required": "Use-Case-Beschreibung, Datenarten, Modell-/Vendor-Info, DSFA-Entscheidung und Nutzerhinweis." } ], "routing_rules": [ { "when": "priority=kritisch", "route_to": [ "Datenschutz/Legal", "IT/Marketing" ], "sla_hours": 48, "reminder_after_hours": 24, "escalate_after_hours": 72 }, { "when": "priority=hoch", "route_to": [ "Datenschutz/Legal", "Website-Betrieb" ], "sla_hours": 120, "reminder_after_hours": 72, "escalate_after_hours": 168 }, { "when": "topic contains Vendor or Transfer", "route_to": [ "Datenschutz", "Einkauf", "IT" ], "sla_hours": 168, "reminder_after_hours": 96, "escalate_after_hours": 240 }, { "when": "Release betrifft Cookies, CMP, Anbieter, Formular oder KI", "route_to": [ "Release-Owner", "Datenschutz" ], "sla_hours": 24, "reminder_after_hours": 12, "escalate_after_hours": 36 } ], "notification_channels": { "email": { "subject_template": "[SaferPage] {priority} Regulatory Alert für open2chat.at", "recipient_group": "privacy-ops@betreiber.example", "body_fields": [ "title", "topic", "source_url", "next_step", "impacted_centers" ] }, "slack": { "channel": "#privacy-ops", "payload_template": { "text": "{title}", "blocks": [ "priority", "topic", "source_url", "next_step" ] } }, "teams": { "webhook_name": "Privacy Ops Alerts", "payload_template": { "title": "{title}", "summary": "{next_step}", "sections": [ "Evidence", "Impacted Centers" ] } }, "webhook": { "method": "POST", "content_type": "application/json", "signature_header": "X-SaferPage-Signature", "idempotency_header": "Idempotency-Key" }, "rss": { "feed_url": "https://saferpage.de/regulatory-watch/open2chat.at/alerts-json", "item_key": "dedupe_key" } }, "alerts": [ { "id": "reg-alert-01", "title": "DSK Orientierungshilfe digitale Dienste für open2chat.at bewerten", "jurisdiction": "DE/EU", "topic": "TDDDG, ePrivacy, Cookies, Consent, GPC", "priority": "kritisch", "status": "routing-ready", "source_url": "https://www.datenschutzkonferenz-online.de/media/oh/OH_Digitale_Dienste.pdf", "source_name": "DSK Orientierungshilfe digitale Dienste", "impacted_centers": [ "https://saferpage.de/consent/open2chat.at", "https://saferpage.de/cookies/open2chat.at", "https://saferpage.de/consent-banner/open2chat.at/blocking-json", "https://saferpage.de/consent/open2chat.at/framework-json" ], "owner": "Marketing/IT/Datenschutz", "due_in_days": 7, "next_step": "Consent-Default, Auto-Blocking, Cookie-Katalog und GPC-Verhalten vor dem nächsten Release abgleichen.", "evidence_required": "Consent-Screenshot, Cookie-Diff, Script-Blocking-Nachweis, CMP-Version und Test-URL.", "dedupe_key": "14bd8cba054927507f4ccc0f693b54904d139253f47cfeb8f09801f4d94e5099" }, { "id": "reg-alert-02", "title": "DSGVO Art. 6 für open2chat.at bewerten", "jurisdiction": "EU/DACH", "topic": "DSGVO, Betroffenenrechte, Notice, DSFA", "priority": "hoch", "status": "routing-ready", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_name": "DSGVO Art. 6", "impacted_centers": [ "https://saferpage.de/datenschutz/open2chat.at/entwurf", "https://saferpage.de/rechte/open2chat.at", "https://saferpage.de/assessment/open2chat.at/workflow-json", "https://saferpage.de/dsfa/open2chat.at" ], "owner": "Datenschutz/Legal", "due_in_days": 14, "next_step": "Pflichtänderung gegen Datenschutzhinweis, DSAR-Prozess und Assessment-Workflow prüfen.", "evidence_required": "Quelle, betroffene Textstelle, betroffene SaferPage-Befunde, Entscheidung und Re-Scan-ID.", "dedupe_key": "7a8879a5dfe015bf13a683c268aaa4300f71223ff81378235f11457d0883381a" }, { "id": "reg-alert-03", "title": "DSGVO Art. 28 und Kapitel V für open2chat.at bewerten", "jurisdiction": "EU/DACH", "topic": "DSGVO, Betroffenenrechte, Notice, DSFA", "priority": "hoch", "status": "routing-ready", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_name": "DSGVO Art. 28 und Kapitel V", "impacted_centers": [ "https://saferpage.de/datenschutz/open2chat.at/entwurf", "https://saferpage.de/rechte/open2chat.at", "https://saferpage.de/assessment/open2chat.at/workflow-json", "https://saferpage.de/dsfa/open2chat.at" ], "owner": "Datenschutz/Legal", "due_in_days": 14, "next_step": "Pflichtänderung gegen Datenschutzhinweis, DSAR-Prozess und Assessment-Workflow prüfen.", "evidence_required": "Quelle, betroffene Textstelle, betroffene SaferPage-Befunde, Entscheidung und Re-Scan-ID.", "dedupe_key": "90c6d4fc8d418e1d40dc9aa1547e459e9b070bf8d5c6361b2229f08c668d5d67" }, { "id": "reg-alert-04", "title": "BSI TLS-Mindeststandard und IT-Grundschutz Webserver/Webanwendungen für open2chat.at bewerten", "jurisdiction": "DE/EU", "topic": "Security, TOM, TLS, BSI", "priority": "hoch", "status": "routing-ready", "source_url": "https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Mindeststandards/Mindeststandard_BSI_TLS_Version_2_3.pdf", "source_name": "BSI TLS-Mindeststandard und IT-Grundschutz Webserver/Webanwendungen", "impacted_centers": [ "https://saferpage.de/technik/open2chat.at", "https://saferpage.de/nachweise/open2chat.at", "https://saferpage.de/kontrollen/open2chat.at" ], "owner": "IT/Security", "due_in_days": 14, "next_step": "Technische Schutzmaßnahmen, Header, TLS und Evidence Pack gegen die neue Anforderung prüfen.", "evidence_required": "Header-/TLS-Auszug, Kontrolltest, Change-Ticket und Nachweislink.", "dedupe_key": "5f177731903a72202cfbc6ab5902de152bd41347b9942e82e9955e941961a6b1" }, { "id": "reg-alert-05", "title": "Google Consent Mode Dokumentation für open2chat.at bewerten", "jurisdiction": "DE/EU", "topic": "TDDDG, ePrivacy, Cookies, Consent, GPC", "priority": "kritisch", "status": "routing-ready", "source_url": "https://developers.google.com/tag-platform/security/concepts/consent-mode", "source_name": "Google Consent Mode Dokumentation", "impacted_centers": [ "https://saferpage.de/consent/open2chat.at", "https://saferpage.de/cookies/open2chat.at", "https://saferpage.de/consent-banner/open2chat.at/blocking-json", "https://saferpage.de/consent/open2chat.at/framework-json" ], "owner": "Marketing/IT/Datenschutz", "due_in_days": 7, "next_step": "Consent-Default, Auto-Blocking, Cookie-Katalog und GPC-Verhalten vor dem nächsten Release abgleichen.", "evidence_required": "Consent-Screenshot, Cookie-Diff, Script-Blocking-Nachweis, CMP-Version und Test-URL.", "dedupe_key": "88448d38e7d46e1b39f0f45704f6deb9b6ac7c4c14b6e9723ab3564c42af70a2" }, { "id": "reg-alert-06", "title": "WCAG 2.2 / BFIT / European Accessibility Act für open2chat.at bewerten", "jurisdiction": "DE/EU", "topic": "TDDDG, ePrivacy, Cookies, Consent, GPC", "priority": "kritisch", "status": "routing-ready", "source_url": "https://www.w3.org/TR/WCAG22/", "source_name": "WCAG 2.2 / BFIT / European Accessibility Act", "impacted_centers": [ "https://saferpage.de/consent/open2chat.at", "https://saferpage.de/cookies/open2chat.at", "https://saferpage.de/consent-banner/open2chat.at/blocking-json", "https://saferpage.de/consent/open2chat.at/framework-json" ], "owner": "Marketing/IT/Datenschutz", "due_in_days": 7, "next_step": "Consent-Default, Auto-Blocking, Cookie-Katalog und GPC-Verhalten vor dem nächsten Release abgleichen.", "evidence_required": "Consent-Screenshot, Cookie-Diff, Script-Blocking-Nachweis, CMP-Version und Test-URL.", "dedupe_key": "851aa6cde707acc4eb374809929d2ae4c0a67436af54cb59e7a398239f4ffedd" }, { "id": "reg-alert-07", "title": "BFSG/WCAG für open2chat.at bewerten", "jurisdiction": "DE/EU", "topic": "BFSG, WCAG, Barrierefreiheit", "priority": "mittel", "status": "routing-ready", "source_url": "/guides/barrierefreiheit-cookie-banner-formulare", "source_name": "BFSG/WCAG", "impacted_centers": [ "https://saferpage.de/barrierefreiheit/open2chat.at", "https://saferpage.de/datenschutz-hub/open2chat.at" ], "owner": "UX/IT/Datenschutz", "due_in_days": 30, "next_step": "Consent-, Datenschutz- und DSAR-Flows auf Bedienbarkeit, Kontrast, Tastatur und klare Sprache prüfen.", "evidence_required": "WCAG/BFSG-Testnotiz, betroffene URLs, Screenshot und Entscheidung.", "dedupe_key": "04c422fcae6c68cd0a0554102b172c48bada51d0ba42168cf5712bfe2a056b57" }, { "id": "reg-alert-08", "title": "BSI/Security für open2chat.at bewerten", "jurisdiction": "DE/EU", "topic": "Security, TOM, TLS, BSI", "priority": "hoch", "status": "routing-ready", "source_url": "/guides/security-header-setzen", "source_name": "BSI/Security", "impacted_centers": [ "https://saferpage.de/technik/open2chat.at", "https://saferpage.de/nachweise/open2chat.at", "https://saferpage.de/kontrollen/open2chat.at" ], "owner": "IT/Security", "due_in_days": 14, "next_step": "Technische Schutzmaßnahmen, Header, TLS und Evidence Pack gegen die neue Anforderung prüfen.", "evidence_required": "Header-/TLS-Auszug, Kontrolltest, Change-Ticket und Nachweislink.", "dedupe_key": "fc8fbeb2f6b4f8b492fde52b1c5dafaec9c69427de2bd2d144a5bcf6b513a5be" }, { "id": "reg-alert-09", "title": "DSGVO für open2chat.at bewerten", "jurisdiction": "EU/DACH", "topic": "DSGVO, Betroffenenrechte, Notice, DSFA", "priority": "hoch", "status": "routing-ready", "source_url": "/guides/datenschutzerklaerung-verbessern", "source_name": "DSGVO", "impacted_centers": [ "https://saferpage.de/datenschutz/open2chat.at/entwurf", "https://saferpage.de/rechte/open2chat.at", "https://saferpage.de/assessment/open2chat.at/workflow-json", "https://saferpage.de/dsfa/open2chat.at" ], "owner": "Datenschutz/Legal", "due_in_days": 14, "next_step": "Pflichtänderung gegen Datenschutzhinweis, DSAR-Prozess und Assessment-Workflow prüfen.", "evidence_required": "Quelle, betroffene Textstelle, betroffene SaferPage-Befunde, Entscheidung und Re-Scan-ID.", "dedupe_key": "5b416ebdaa2f85aca4ebb94e9150e693b8dea92f0a745020716d4cbb1cdf4a5b" }, { "id": "reg-alert-10", "title": "TDDDG/ePrivacy für open2chat.at bewerten", "jurisdiction": "DE/EU", "topic": "TDDDG, ePrivacy, Cookies, Consent, GPC", "priority": "kritisch", "status": "routing-ready", "source_url": "/guides/tracking-und-consent-reparieren", "source_name": "TDDDG/ePrivacy", "impacted_centers": [ "https://saferpage.de/consent/open2chat.at", "https://saferpage.de/cookies/open2chat.at", "https://saferpage.de/consent-banner/open2chat.at/blocking-json", "https://saferpage.de/consent/open2chat.at/framework-json" ], "owner": "Marketing/IT/Datenschutz", "due_in_days": 7, "next_step": "Consent-Default, Auto-Blocking, Cookie-Katalog und GPC-Verhalten vor dem nächsten Release abgleichen.", "evidence_required": "Consent-Screenshot, Cookie-Diff, Script-Blocking-Nachweis, CMP-Version und Test-URL.", "dedupe_key": "14863b09bab3b7418e1bbe8704dd658f8e775d3b2f5e5763a78e813b4a06f6d2" }, { "id": "reg-gap-01", "title": "Wiederholungsscans und Change-Alerts angebunden schließen", "jurisdiction": "DE/EU", "topic": "TDDDG, ePrivacy, Cookies, Consent, GPC", "priority": "kritisch", "status": "operator-action-needed", "source_url": "https://saferpage.de/monitoring", "source_name": "SaferPage Gap", "impacted_centers": [ "https://saferpage.de/consent/open2chat.at", "https://saferpage.de/cookies/open2chat.at", "https://saferpage.de/consent-banner/open2chat.at/blocking-json", "https://saferpage.de/consent/open2chat.at/framework-json" ], "owner": "Marketing/IT/Datenschutz", "due_in_days": 7, "next_step": "Regulatorische Prüfpunkte bei neuen Cookies, Anbietern, Formularen, AI-/Profiling-Use-Cases und Rechtsänderungen erneut bewerten.", "evidence_required": "Alerts 0.", "dedupe_key": "c93ba4291efcfe37e9fc84f4e8c872a939e93a82e0cfce751df110d4f2a165db" }, { "id": "reg-gap-02", "title": "Owner und Review-Kadenz definiert schließen", "jurisdiction": "DE/EU", "topic": "Security, TOM, TLS, BSI", "priority": "hoch", "status": "operator-action-needed", "source_url": "https://saferpage.de/betreiber/open2chat.at", "source_name": "SaferPage Gap", "impacted_centers": [ "https://saferpage.de/technik/open2chat.at", "https://saferpage.de/nachweise/open2chat.at", "https://saferpage.de/kontrollen/open2chat.at" ], "owner": "IT/Security", "due_in_days": 14, "next_step": "Legal/DSB, Website-Betrieb, Marketing, Security und Product als feste Owner für regulatorische Änderungen benennen.", "evidence_required": "Aus öffentlichem Scan nicht beweisbar.", "dedupe_key": "802c515a6b95bb40d5fa834b0ab425c0e909d8ed142cd7c14f43c75c5af4581f" }, { "id": "reg-gap-03", "title": "Quellenstand und Auswirkungsbewertung versioniert schließen", "jurisdiction": "EU", "topic": "KI, Profiling, Automatisierung", "priority": "hoch", "status": "operator-action-needed", "source_url": "https://saferpage.de/nachweise/open2chat.at", "source_name": "SaferPage Gap", "impacted_centers": [ "https://saferpage.de/ki/open2chat.at", "https://saferpage.de/dsfa/open2chat.at", "https://saferpage.de/assessment/open2chat.at/workflow-json" ], "owner": "Product/Datenschutz/Legal", "due_in_days": 14, "next_step": "Quelle, Abrufdatum, betroffene Domains, geänderte Pflicht und Umsetzungsticket versionieren.", "evidence_required": "Aus öffentlichem Scan nicht beweisbar.", "dedupe_key": "1ec016b071478421d8c6d38871bd6465cd09d1f504771e0efb1a92dc42456c6d" } ], "links": { "watch_center": "https://saferpage.de/regulatory-watch/open2chat.at", "alerts_json": "https://saferpage.de/regulatory-watch/open2chat.at/alerts-json", "alerts_csv": "https://saferpage.de/regulatory-watch/open2chat.at/alerts-csv", "digest_md": "https://saferpage.de/regulatory-watch/open2chat.at/digest-md", "assessment_workflow": "https://saferpage.de/assessment/open2chat.at/workflow-json", "operator_board": "https://saferpage.de/betreiber/open2chat.at", "monitoring": "https://saferpage.de/monitoring/domain/open2chat.at", "regulatory_scorecard": "https://saferpage.de/regelwerke/open2chat.at" }, "disclaimer": "Automatisch erzeugtes Routing-Paket. Es sendet keine Nachrichten selbststaendig und ersetzt keine Rechtsberatung." }