What do I need to know legally about employer profile and portal compliance: risk scoring and prioritisation?

In the DACH context, GDPR, national employee data protection rules and the General Equal Treatment Act (AGG) must be considered together. Recommendation: for risk scoring and prioritisation, establish fixed deletion periods, role-based access rights and audit logs. In practice: example 2 -- review cycle with audit log, KPI tracking and escalation path. Limitation: overly generic rules without role or legal context reduce quality. (Sources: EU Directive 2023/970 Pay Transparency, GDPR General Data Protection Regulation)