Suchergebnisse für rapport de révision

Intelligence artificielle et automatisation des décisions dans le secteur bancaire et financier : application de la LPD et du RGPD

This article addresses the application of Automated Decision-Making (ADM) in banking and finance, under the revised Swiss Federal Act on Data Protection and the EU’s GDPR. It scrutinizes the legal framework of ADM, particularly considering the European Court of Justice’s interpretation in the SCHUFA Holding AG case, which broadens the scope of “decision” within the GDPR, encompassing actions like…

Intelligence artificielle: la titularité des données

Data are at the heart of AI systems. Without data, AI systems are valueless. Data come into play at different phases, both at the input level (training sets, validating sets, testing sets), as well as at the output level. Although the Proposal for AI Regulation released on 21 April 2021 by the European Commission offers a promising regulatory framework as to the governance related to the design…

Annonce des violations de la sécurité des données: une nouvelle obligation de la nLPD

The data security principle (art. 8 of the revised Federal Act on Data Protection (rFADP) requires that the controller and when applicable the processor take all the necessary measures to maintain a sufficient level of security when processing personal data, including to prevent any data breach. Nevertheless, data breaches can occur and when so, the controller shall react quickly in order to…

Transparence des traitements de données personnelles opérés par les organes fédéraux: un pas en avant, deux en arrière

The recent revisions of European data protection instruments have been marked by the desire to give data subjects back control over their data, in particular by improving the transparency of data processing. The same desire for enhanced visibility and intelligibility has motivated the Swiss legislator in the revision of the Data Protection Act. The fact remains that the objective has only been…

Big Data and the Law: a holistic analysis based on a three-step approach – Mapping property-like rights, their exceptions and licensing practices

Given Big Data’s increasing importance, it seems important to develop a clear and coherent body of law and to organize the different relationships among all stakeholders and legal regimes that grant different property-like rights. There are already numerous studies on the interactions between Big Data and intellectual property and/or privacy, but less that map all legal regimes, including the…

Les données bancaires pseudonymisées – Du secret bancaire à la protection des données

Law strictly restricts the transfer of personal data and data protected by banking secrecy, especially outside of Switzerland. Personal data is defined as all information relating to an identified or identifiable person. Similarly, legal scholarship and case law hold that banking secrecy protects only client identifying data. The ability to identify the relevant person is thus core to both data…

Corporate Internal Investigations under Swiss Law: Information Gathering and Employee Interviews

The information gathering and review phase is fundamental to every corporate internal investigation. It forms the factual basis for the final report and legal considerations at a later stage of the investigation and provides evidence which might become relevant in a later civil, regulatory or criminal proceeding. It is therefore crucial that the data collection and interview phase is conducted in…

Enquêtes internes et secret professionnel de l’avocat

The Federal Court recently rendered two decisions on the issue of the protection of the lawyer’s professional secrecy within the context of internal inquiries. These decisions represent an important step, since there were contradictory opinions in legal writings on the issue of whether lawyers’ participation in internal inquiries should be regarded as a typical activity, and consequently covered…

Numérisation et registre du commerce

From the point of view of the competent authorities, paperless keeping of the commercial registry has long been a reality. All necessary tools for electronic filing by the users also exist. However, such form of communication remains optional, and experience shows that paper filings remain the norm. In the absence of a statutory obligation, the situation is not likely to change until innovative,…

Protection des données et nouvelles procédures de communication aux autorités fiscales et de surveillance étrangères

At a time when banking secrecy is shrinking, the lawmaker has decided to redefine the role of data protection in international cooperation procedures with regulatory and tax authorities. The law allows a supervised entity, typically a bank, to transmit confidential information to certain foreign authorities and organizations, but requires it to safeguard the rights of its clients and other third…