Suchergebnisse für Datenschutz

Informationspflichten und Auskunftsrecht nach dem neuen Datenschutzrecht

The revision of the Data Protection Act aims to improve transparency for data subjects as to which of their data is processed and how. In order to achieve better transparency and to incorporate legislative developments at the European level, the information obligations for data controllers and the rights of data subjects to obtain information, have been strengthened in the course of the revision…

Annonce des violations de la sécurité des données: une nouvelle obligation de la nLPD

The data security principle (art. 8 of the revised Federal Act on Data Protection (rFADP) requires that the controller and when applicable the processor take all the necessary measures to maintain a sufficient level of security when processing personal data, including to prevent any data breach. Nevertheless, data breaches can occur and when so, the controller shall react quickly in order to…

Das Profiling im neuen Datenschutzrecht

The revised Data Protection Act will introduce the concept of profiling into Swiss law. This term will be defined in the same way as in the European General Data Protection Regulation (GDPR) as any automated processing of personal data to evaluate certain personal aspects relating to a natural person. Unlike the GDPR, the new Act will create a special category of high-risk profiling, which is…

Datenportabilität und ihre Umsetzung

The right to data portability will be introduced, as a first for Switzerland, with the revised Swiss Data Protection Act. Inspired by the GDPR but with a “Swiss finish”, data subjects may (if certain conditions are met) request the controller to transfer “their” personal data to them or another controller. However, a number of questions remain open, for example: Which type of data is subject to…

Die Strafbestimmungen des neuen DSG

As soon as the revised Swiss Federal Act on Data Protection (DPA) will come into force, the cantonal prosecuting authorities will be entitled to impose heavy fines of up to CHF 250 000 on the person responsible for non-compliant behavior. While this may seem to be a low figure compared to the high figures provided for by the GDPR, the fines under the revised DPA are of personal nature and may not…

Transparence des traitements de données personnelles opérés par les organes fédéraux: un pas en avant, deux en arrière

The recent revisions of European data protection instruments have been marked by the desire to give data subjects back control over their data, in particular by improving the transparency of data processing. The same desire for enhanced visibility and intelligibility has motivated the Swiss legislator in the revision of the Data Protection Act. The fact remains that the objective has only been…

Editorial

Die Digitalisierung verändert immer weitere Be­reiche des täglichen Lebens und der Tätigkeiten von Unternehmen und Behörden. Betroffen sind auch Handlungen, die seit jeher von Menschen ausgeführt…

Automatisierte Entscheidungen: Grundfragen aus der Perspektive des Privatrechts

Data protection law addresses the issue that more and more (complex) decisions are taken automatically. A closer look at the regulatory approaches of the General Data Protection Regulation (GDPR), the Council of Europe’s Convention 108 and the draft Swiss Federal Act on Data Protection (draft FADP) leads to two conclusions. On the one hand, the scope of application of these provisions is too…

Automatisierte Entscheidungen: Perspektive Grundrechte

Automated decisions affect the legal system in a wide variety of areas. In a state governed by the rule of law, fundamental rights are of great importance; their ­validity can lead to a conflict with «results» produced by algorithms. The article examines five areas (employment relationships, biomedical «environment», moderation of online content, financial markets, procedural guarantees) and,…

Automatisierte Entscheidungen: Perspektive Datenschutzrecht und ­öffentliche Verwaltung

In the area of government action, automated individual decisions in the sense of the draft revision of the Swiss Federal Data Protection Act (E-DSG) are fully automated decrees. Art. 19 E-DSG provides, on the one hand, for a labelling obligation for such decrees and, on the other hand, for certain decisions, the person concerned is granted the opportunity, upon request, to state his point of view…