Those who take on responsibility within a company rarely have to deal with just one area of expertise. In addition to data protection, they also face questions about information security, the use of AI, and internal responsibilities. These requirements converge in everyday work. Only the technical terminology sometimes seems to be separate.
The compliance books by Dr. Alexander Deicke and his co-authors address these interfaces. They explore regulatory topics and demonstrate how legal principles, technical issues, and operational organization are interconnected.
The publications presented on our K11 books page offer different entry points. Which book is suitable therefore depends less on the size of your bookshelf than on your next task within the company.
A key focus is on titles from the "Made Easy" series published by Edition Wissenschaft & Praxis. These include books on data protection, AI regulation, information security, whistleblowing, and supply chain law. The selection is complemented by titles such as the English-language "AI Compliance" and "Simply Governance," published by Kohlhammer.
Not all publications belong to the same publishing series. However, they are united by the question of how complex requirements can be transformed into understandable and practically applicable knowledge.
This approach is particularly helpful for management, compliance officers, and specialist departments. They don't need to be able to answer every specific question themselves. However, they should be able to recognize which questions arise, who needs to be involved, and where closer examination is required.
A company wants to use AI. The first applications have been selected, but within the team, technical possibilities, legal requirements, and organizational expectations are still being confused.
"AI Regulation – Made Easy" by Alexander Deicke, Francois Heynike, and Hannes Deuerling offers a thematic introduction. The book combines technical fundamentals with questions of European AI regulation. The Data Act, the Data Governance Act, and standards such as ISO/IEC 42001 are also covered.
This makes the title a suitable starting point for a shared understanding of the concept: What does an AI application achieve? What risks need to be considered? And why doesn't its implementation end with the acquisition of a license?
For English-speaking teams , "AI Compliance" by Alexander Deicke and Hannes Deuerling complements the selection. The book provides an introduction to AI and AI governance in English and addresses regulatory and ethical requirements.
Both titles can support the preparation and deepening of in-company training. However, reading alone does not replace application-oriented exercises or the evaluation of concrete AI applications.
Data protection becomes practical in a company at the latest when new software is introduced, a service provider is involved, or an information request is to be processed.
"Data Protection Made Easy" by Alexander Deicke and Leonie Schönhagen covers the fundamentals of handling personal data. In addition to the legal framework of the GDPR and the BDSG (German Federal Data Protection Act), the book examines data protection management systems and their organizational implementation.
The benefit for companies lies in this connection: Individual documents become more understandable when it is clear which process they belong to.
For newly appointed data protection coordinators or specialist departments, this book can therefore be a helpful guide. It supports them in discussing concerns more effectively with data protection officers and in recognizing their own contribution to implementation.
A suspicious email reaches the accounting department. A key service provider drops out. A former employee still has access rights. Situations like these demonstrate why information security is not solely a technical matter.
"Information Security Made Easy" by Alexander Deicke, Alexander Schinner, and Dino Huber covers threats, protective measures, and the organizational management of security. The topics include cyberattacks, security audits, and management systems.
For managers and specialist departments, this provides access to questions that would otherwise be quickly delegated entirely to IT: Which information is particularly sensitive and requires protection? Which processes must continue to function even in the event of a disruption? And how do technology, responsibilities, and behavior interact?
A security concept does not become effective simply because only the IT department knows where it is located.
A whistleblower system consists of more than just a technical reporting mechanism. Companies also need a concept of how reports are received, processed, and integrated into appropriate procedures.
"Whistleblowing – Made Easy" by Alexander Deicke and Marcus Sultzer combines the legal foundations of whistleblower protection with practical organizational issues. It also covers various solutions, such as IT tools and ombudspersons.
This makes the title particularly interesting for those responsible for better understanding an existing process or preparing its further development.
The crucial question for readers is not only: "Which channel should we set up?" but also: "How do we ensure that an incoming tip is then processed appropriately?"
Those who select suppliers and evaluate business relationships encounter questions that go beyond price, quality and delivery time.
“Supply Chain Laws – Made Easy” by Alexander Deicke, Mansur Pour Rafsendjani and Lukas Schmidt addresses the supply chain issue in connection with corporate responsibility, ESG and organizational instruments.
For purchasing, compliance and management, the book can help to understand the connections behind individual requirements and to prepare for cooperation between these areas.
Especially with dynamic regulatory topics, it's important to remember that a textbook reflects the current state of the law at the time of its publication. Whether a specific obligation is valid today and applies to your own company must be verified using current legal sources.
Data protection, information security, compliance, and risk management address different tasks. However, within a company, they frequently encounter the same projects and decisions.
"Simply Governance – Foundations, Structures and Implementation for Practice" by Alexander Deicke and Ali Kenan Nohut focuses on this interplay. The book combines legal, technical, and strategic perspectives and addresses, among other things, roles, processes, and cross-departmental management. According to the publisher, case studies, checklists, and visual aids are included in the presentation.
For companies with several established specialist functions, this is a suitable area of specialization. The question then becomes not only whether each discipline knows its tasks, but also whether their processes fit together effectively.
This can be relevant, for example, when introducing an AI service: Data protection, IT security, purchasing and specialist departments need different information, but should work towards a coordinated decision.
The selection is expanded with "Money Laundering and Fraud Prevention – Made Easy" . According to the publisher's announcement, the volume will cover money laundering regulations, fraud prevention, and legal and organizational issues in fraud and recovery cases.
The publisher currently lists October 2026 as the expected delivery date . Therefore, as of this writing, this is an outlook, not a confirmed availability.
Availability as of September 28, 2026.
A book can provide the basics. For implementation, it's worthwhile to connect these with a specific business question.
One possible starting point: A small project team reads a relevant passage and then discusses three questions:
In this way, reading becomes a basis for work. In an AI project, for example, technical fundamentals, data protection issues and governance can be combined without having to immediately work through every available set of rules in its entirety.
K11 Consulting helps companies to transfer this knowledge into everyday business operations through consulting, suitable processes and practical training .
The compliance books by Alexander Deicke and his co-authors offer different approaches to topics that companies must tackle together: AI, data protection, information security, whistleblower protection and governance.
Their practical value lies in making connections clearer and preparing for well-informed discussions. They do not replace an actual case review. But they help you go into that review with better questions.
An overview of the titles and further information can be found on our K11 books page .