With this law, the German government would like to protect small companies and online stores in particular from data protection warnings that threaten their existence.
Web pages were increasingly searched automatically by crawlers for minimal errors, e.g. in the imprint, and warnings were sent by means of serial letters.
Although it is still possible to be warned in the event of violations of the statutory labeling and information requirements, there is no longer any entitlement to reimbursement of costs. The possibility for contractual penalties was also restricted and the penalties for small companies were capped at 1000 euros for simple cases. If you receive an unjustified warning, you should be reimbursed for the legal costs that the person issuing the warning has also claimed.
What to do if you have received a data protection warning?
Do not act hastily and do not sign an injunction, even if the warning is justified by the GDPR. Consult with a lawyer.
It’s even better if they don’t let it get that far in the first place. Get assistance from a certified GDPR consultant who will work with them to develop the privacy policy, which they can then post on their homepage.