iisys gebaeude innen

interior view of the iisys building

Law in Sustainability, Compliance and IT



The research group is currently working on the following topics:


Hof University of Applied Sciences is involved in the Bavarian-wide study on "CoVaKo 2021" on the safety and effectiveness of the SARS-CoV-2 vaccination. The project is about three things: Firstly, the effectiveness of the vaccination in different groups of people, an active recording of the side effects as well as an investigation of the breakthrough infections, i.e. the risk factors of people who - although vaccinated - become infected with the virus. The task of the research groups "Analytical Information Systems" and "Law in Sustainability, Compliance and IT" is to establish a research database at Hof University of Applied Sciences and to organise it technically in such a way that data protection and data security are maintained with the greatest possible benefit for research.

Press releases:

Encountering Corona: One Million Euros for Vaccination Study CoVaKo 2021

One million euros for Corona vaccination study


The REIF project, funded by the Federal Ministry for Economic Affairs and Energy (BMWi) as part of the "Artificial Intelligence as a Driver for Economically Relevant Ecosystems" funding programme, is investigating the potential of artificial intelligence (AI) to optimise the ability to plan and control value creation in food. The aim is to design an AI ecosystem that integrates stakeholders from all stages of the value chain in such a way that food waste can be reduced sustainably and holistically with the help of artificial intelligence. The Legal Research Group in Sustainability, Compliance and IT of the Institute for Information Systems at Hof University of Applied Sciences will provide legal support for the project on the topics of data protection law, rights management in the ecosystem and liability for AI applications.

DMKG Headache Register

The aim of the project funded by the German Migraine and Headache Society (DMKG) is to develop a database to support doctors in the diagnosis, treatment and follow-up of headache patients. (DMKG) is the development of a database to support doctors in the diagnosis, treatment and monitoring of headache patients. By evaluating pseudonymised and anonymised patient data, new scientific findings in the field of headache research (health services research) are to be gained. Gaps in the care of headache patients can thus be identified, for example, and closed through targeted interventions. The research group Law in Sustainability, Compliance and IT of the Institute for Information Systems at Hof University of Applied Sciences was involved in the project from the very beginning. Core elements of the research work here include not only the area of data protection-compliant design of the database, but also certification as a medical product and preparation of the ethics votes by the corresponding ethics commissions of the Länder.


In the SAUBER project - "Satellite-based system for displaying, forecasting and simulating air pollutants for sustainable urban and regional development" - funded by the Federal Ministry of Transport and Digital Infrastructure (BMVI) as part of the "mFUND" technology programme, an information system is being developed that combines data and services from the Copernicus programme with other sources, e.g. traffic data, weather data and data from the German Federal Ministry of Transport and Digital Infrastructure. In particular, data and services from the Copernicus programme will be combined with other sources, e.g. traffic data, weather and climate data, geo-information and sensor data, thus enabling a real-time and forecast-capable picture of air quality for sustainable urban and regional development. Within the project, the research group Law in Sustainability, Compliance and IT of the Institute for Information Systems at Hof University of Applied Sciences is investigating the legal admissibility, in particular with regard to data protection, the right to one's own image and the usability of geodata with regard to the balancing of the right of informational self-determination and concerns of public safety and order, as well as the usability of the data within the framework of an open data concept.


As part of the futureTEX project funded by the Federal Ministry of Education and Research (BMBF), the Institute of Materials Science (ifm), Innovative Textiles Research Group, and the Institute of Information Systems (iisys), Law in Sustainability, Compliance and IT Research Group, together with the Saxon Textile Research Institute (STFI), the Technical University of Braunschweig and MSA Deutschland GmbH, are conducting research in the SelVliesPro (Self-controlled Nonwoven Production) project on the construction of an intelligent plant for processing recycled high-performance fibres while integrating Industry 4. 0 approaches in high-tech applications.

The focus of the work is on the topics of intelligent maintenance, self-learning manufacturing systems and human-machine interaction, their legal challenges and the realisation of a practical transfer of knowledge to industry through the development of a modular, requirement-oriented teaching and training concept.

Within the project, the legal research group is responsible for the analysis, concept development and process modelling for rights management, data protection and liability. The work objectives are the establishment of effective rights and data management and the development of a data protection compliance concept as well as an innovative data process design. The results will then be incorporated into the individual training modules.

Compliance for universities and research institutions

Universities today are making the transition from classic administrative units to modern scientific enterprises with entrepreneurial accents in order to survive in the international competition for students and research funds or to open up new fields of research. However, academic freedom, legal requirements and the socio-political mandate set narrow limits on the entrepreneurial risks they can take. The book Compliance in Hochschulen (Compliance in Higher Education Institutions) explains the characteristics of a compliance management system that is appropriate for academia.

Click here for the interview with the two authors Prof. Dr. Beatrix Weber, MLE and Dr. Stefanie Lejeune.

Weber, Beatrix/Lejeune, Stefanie: Compliance in Hochschulen. Risk management in the academic sector: in ZRFC 04/2019, p.151-156

Compliance for SMEs

SMEs now also have to face the issue of compliance. Compliance serves to ensure adherence to the law, internal company guidelines, values and other standards and is intended to prevent legal violations and damage to the company. Compliance is an original task of the company management. Compliance management systems (CMS) therefore also serve to absolve managing directors and board members of liability. The project examines how the extensive CMS, which are rather tailored to large group companies, can be mapped to SMEs in a lean and cost-compatible structure without losing their legal effectiveness.

Completed projects


The aim of the "AMiProSI" project was to create an integrated platform for cooperation, especially among regionally distributed employees in knowledge-intensive activities, which supports them in the best possible way. Typical knowledge processes are mapped directly, process-oriented and cross-system in software, so that the end user gets the impression of a uniform intranet. Within the research project, it was the task of the Legal Research Group in Sustainability, Compliance and IT, in addition to clarifying questions of labour law, such as the co-determination of the works council according to § 87 para. 1 no. 6 BetrVG, to evaluate the compatibility of the various open source modules. Furthermore, a data protection concept was drawn up to adequately safeguard the rights and freedoms of affected natural persons.


sd-kama (smart data disaster management) is an information platform under development that makes a variety of data from different sources available in real time to emergency task forces and disaster managers. In acute cases, information on the extent and intensity of a disaster is usually not available. This is where sd-kama comes in. The information platform combines and supplements information bases from satellite and aerial data with data from in situ sensing and crowdsourcing sources. The information is presented in easy-to-use digital maps. With sd-kama, emergency services have access to an up-to-date and comprehensive picture of the situation with an unprecedented density of information.

Accompanying research on law: "Innovations from Smart Data

Big Data, Smart Data, next? Combining technology and law. Creating manageable solutions for small and medium-sized enterprises. Prof. Dr. Beatrix Weber - Debate contribution of the Accompanying Research on Law of the Smart Data Programme of the BMWi

--> 3rd workshop of the "Law" expert group

As part of the technology programme "Smart Data - Innovations from Data" of the Federal Ministry for Economic Affairs and Energy (BMWi), the FZI Research Centre for Information Technology is conducting research together with the Gesellschaft für Informatik e.V. (GI). (GI) for methods to develop the future market for Big Data technologies in Germany. Prof. Dr. Weber heads the working group "Data as an Economic Good" with the spiritus rector Dr. Alexander Duisberg and is particularly responsible for the topic of data protection and competition law. PD Dr. Oliver Raabe is the head of the law section.

wdd (Web Defacement Detector)

Together with Blue Eye Solutions GmbH, the wdd (Web Defacement Detector) project worked out how information and publication obligations for companies on websites can be implemented in an evidence-proof manner. The aim was to identify the basics of the information obligations with regard to the notification of the modification of a website via the wdd, in order to determine the legal basis for a possible liability in the modification of websites and to implement this technically. In this way, the project contributed to making legal certainty and judicial provability possible in the context of IT compliance.

Data protection with smart meters

In the course of the smart meter rollout, data is to be collected via smart meters and value-added services are to be developed for customers beyond supply, such as more flexible tariffs, integration into a smart home structure and control of electricity consumption according to times and costs in order to increase energy efficiency. The project will investigate the extent to which current legislation and the expected General Data Protection Regulation will influence product design and what legal possibilities and limits exist.

Legal research by means of opinion mining

The enactment of laws and legal projects is usually a top-down process that is initiated by the Bundestag as legislator via the federal government. How the implementation takes place in the individual social groups of companies, consumers and other organisations and what acceptance these projects enjoy is neither systematically examined nor researched. In this project, the methods of opinion mining were used together with the research group Analytical Information Systems to research the acceptance and impact of law.

iisys on Xing

We use cookies on our website. Some of them are essential for the operation of the site, while others help us to improve this site and the user experience (tracking cookies). You can decide for yourself whether you want to allow cookies or not. Please note that if you reject them, you may not be able to use all the functionalities of the site.