Suchergebnisse für DSGVO

Open Finance und Decentralized Finance – Entwicklungen in einem disruptiven Finanzmarktumfeld

The recent technological developments not only impact society in general but they also strongly influence financial markets, even in a disruptive way. Open finance and decentralized finance cause an opening of the financial ecosystem and challenge existing notions; for example, new concepts are needed for the regulation of data access/portability and of digital identity as well as for the…

Kooperationsformen zwischen Banken und Drittanbietern aus vertrags- und datenschutzrechtlicher Perspektive

Open Banking or Open Finance essentially means the exchange of financial data between different financial service providers including third party providers at the request of the customer. From a civil liability and data protection perspective this paper examines the legal relationships between banks, third party providers, platforms and customers on the basis of four possible «model forms of…

Do Robots Rule Wealth Management? A Brief Legal Analysis of Robo-Advisors

What are the legal duties of robo-advisors in Switzerland? In this article, we focus on the legal framework arising from Swiss financial market law, contract law and data protection law. We also make a comparison with European law. We first explain how robo-advisors work and conclude that, contrary to what their name may suggest, they are primarily portfolio managers. As financial service providers…

KI Sandboxen für die Schweiz?

A sandbox allows companies to test innovative products, services, and business models in a live market environment. Stemming originally from the FinTech sector, sandboxes have recently gained importance, especially in the context of artificial intelligence, where they are intended to serve to resolve the conflict between data protection and innovation by allowing innovation while ensuring that…

Regulierung von künstlicher Intelligenz für FinTech-Anwendungen

New methods of artificial intelligence represent one of the greatest promises and most prospective developments of digitalisation. Artificial intelligence has already enabled numerous innovative applications in the areas of image recognition, medicine, language and mobility, and it is also increasingly being used in the financial market, on which this article focuses. In addition to great…

Editorial

Das europäische Datenschutzrecht ist seit mehreren Jahren in Bewegung: Im Mai 2016 hat die EU die Datenschutzgrundverordnung (DSGVO) vorgelegt, die einen einheitlichen Rechtsrahmen für das…

Der «grosse Bruder» DSGVO und das revDSG: Ein vergleichender Überblick

The revised Swiss Data Protection Act is very much influenced by European legislation. In the debate and discussions, the GDPR was and still is in the foreground as the «big brother». However, it is not the GDPR that is the guiding principle in the interpretation of the provisions taken from European law, but the Convention 108+ of the Council of Europe and the Police and Justice Directive of the…

Informationspflichten und Auskunftsrecht nach dem neuen Datenschutzrecht

The revision of the Data Protection Act aims to improve transparency for data subjects as to which of their data is processed and how. In order to achieve better transparency and to incorporate legislative developments at the European level, the information obligations for data controllers and the rights of data subjects to obtain information, have been strengthened in the course of the revision…

Annonce des violations de la sécurité des données: une nouvelle obligation de la nLPD

The data security principle (art. 8 of the revised Federal Act on Data Protection (rFADP) requires that the controller and when applicable the processor take all the necessary measures to maintain a sufficient level of security when processing personal data, including to prevent any data breach. Nevertheless, data breaches can occur and when so, the controller shall react quickly in order to…

Das Profiling im neuen Datenschutzrecht

The revised Data Protection Act will introduce the concept of profiling into Swiss law. This term will be defined in the same way as in the European General Data Protection Regulation (GDPR) as any automated processing of personal data to evaluate certain personal aspects relating to a natural person. Unlike the GDPR, the new Act will create a special category of high-risk profiling, which is…

Datenportabilität und ihre Umsetzung

The right to data portability will be introduced, as a first for Switzerland, with the revised Swiss Data Protection Act. Inspired by the GDPR but with a “Swiss finish”, data subjects may (if certain conditions are met) request the controller to transfer “their” personal data to them or another controller. However, a number of questions remain open, for example: Which type of data is subject to…

Die Strafbestimmungen des neuen DSG

As soon as the revised Swiss Federal Act on Data Protection (DPA) will come into force, the cantonal prosecuting authorities will be entitled to impose heavy fines of up to CHF 250 000 on the person responsible for non-compliant behavior. While this may seem to be a low figure compared to the high figures provided for by the GDPR, the fines under the revised DPA are of personal nature and may not…

Daten-Governance und Cloud Banking im neuen Datenschutzrechtsumfeld

Banking is a data-sensitive business. With the adoption of the new Data Protection Act the data protection level will also be increased in Switzerland, amongst others in the data security context. Banks, often using cloud services for efficiency reasons, will have to adapt their data governance framework in the near future: Data processing and storing must meet the data protection and data…

Dokumentenherausgabe nach FIDLEG vs. datenschutzrechtliche Auskunftserteilung

The claim for disclosure according to FinSA is supposed to enable the customer to obtain evidence to effectively enforce his or her rights from the contractual relationship with the financial service provider. The right to request information according to FADP is meant to enable the data subject to control his or her personal data and thus to protect and enforce his or her personal rights…

«Open Banking» in der Schweiz – Herausforderungen an den Schnittstellen von Finanzmarkt-, Datenschutz- und Kartellrecht

«Open Banking» challenges traditional financial institutions in Switzerland and around the world. It poses strategic as well as legal compliance challenges. The present study delimits the (sometimes synonymously used) terms «Open Banking» and «API Banking» to the effect that Open Banking presupposes an access to the banking account (XS2A) on the basis of non-discriminatory criteria. It thus…

Editorial

Die Digitalisierung verändert immer weitere Be­reiche des täglichen Lebens und der Tätigkeiten von Unternehmen und Behörden. Betroffen sind auch Handlungen, die seit jeher von Menschen ausgeführt…

Automatisierte Entscheidungen: Grundfragen aus der Perspektive des Privatrechts

Data protection law addresses the issue that more and more (complex) decisions are taken automatically. A closer look at the regulatory approaches of the General Data Protection Regulation (GDPR), the Council of Europe’s Convention 108 and the draft Swiss Federal Act on Data Protection (draft FADP) leads to two conclusions. On the one hand, the scope of application of these provisions is too…

Automatisierte Entscheidungen: Perspektive Grundrechte

Automated decisions affect the legal system in a wide variety of areas. In a state governed by the rule of law, fundamental rights are of great importance; their ­validity can lead to a conflict with «results» produced by algorithms. The article examines five areas (employment relationships, biomedical «environment», moderation of online content, financial markets, procedural guarantees) and,…

Automatisierte Entscheidungen: Perspektive Datenschutzrecht und ­öffentliche Verwaltung

In the area of government action, automated individual decisions in the sense of the draft revision of the Swiss Federal Data Protection Act (E-DSG) are fully automated decrees. Art. 19 E-DSG provides, on the one hand, for a labelling obligation for such decrees and, on the other hand, for certain decisions, the person concerned is granted the opportunity, upon request, to state his point of view…

Bestimmung von Vertragskonditionen im Rahmen automatisierter Entscheidungen

Automated decision making has become increasingly popular in the context of contracting. Essential contractual conditions, in particular the price, are automatically determined based on a number of factors, a wealth of data and by the use of algorithms. Automated decision making for contractual terms raises a number of legal issues and questions, in particularly related to data protection, fair…

Robot Recruiting

«Robot recruiting» refers to the automation of the recruiting process using data driven technologies. More than half of HR managers expect artificial intelligence to become part of their daily routine in just a few years’ time. Hiring algorithms are said to make hiring more consistent and efficient and even have the potential to remove interpersonal bias from the hiring process. But critics argue…

Haftung für automatisierte Entscheidungen – Herausforderungen in der Praxis

It is now technically possible for decisions to be made by autonomous means without any human involvement. The ability of automated decision making systems to act increasingly autonomously poses new challenges to the current legal framework. For example, in addition to contractual and non-contractual liability bases, proposals are being made for liability under the Swiss Product Liability Act or…

Credit Scoring, AML Software & Risk Profiling: Automatisierte Entscheidungen im Rahmen von Finanzdienstleistungen

Techniques of automated decision making, including profiling are, no doubt, also of interest to financial service providers. This essay describes three such applications (credit scoring, transaction monitoring for AML purposes, risk profiling for investors) and discusses their possible compliance with the requirements under the EU’s General Data Protection Regulation, as well as the proposed new…

Europareport

Innerhalb eines Verfahrens der ersten Prüfungsphase (Phase I) hat die Europäische Kommission die Übernahme der Consumer Health-Sparte von Pfizer durch das britische Unternehmen GlaxoSmithKline unter Auflagen genehmigt.

Editorial

Die Digitalisierung schreitet weiter voran und verändert Wirtschaft und Gesellschaft in grundlegender Weise. Mit diesen Veränderungen ergeben sich auch immer wieder neue Rechtsfragen, längst auch in…

Daten als Entgelt

The use of personal data as payment means in con­tractual relations is an economic reality that does not contradict the legal framework. In exchange for digital content a data subject may provide personal data to the supplier agreeing to have used them for further data processing. Under Swiss law, such kind of values’ exchange can be qualified as innominate contract that encompasses continuing…

Europareport

Am 18. Juni 2019 entschied der Europäische Gerichtshof (EuGH) in dem politisch bedeutsamen Vertragsverletzungsverfahren der Republik Österreich gegen die Einführung einer PKW-Maut für die Nutzung deutscher Bundesfernstrassen.

Europareport

Am 30. Mai 2018 hat die Europäische Kommission die vorläufige Verständigung zwischen Europäischem Parlament und Rat über einen Kommissionsvorschlag vom März 2017 für eine EU-Richtlinie zur Angleichung des Verfahrensrechts der Kartellbehörden der EU-Mitgliedstaaten bekanntgegeben. Es handelt sich hierbei um ein schon länger verfolgtes Projekt der Europäischen Kommission, das darauf zielt, einmal…

Europareport

In seinem Urteil vom 23. Januar 2018 in der Rechtssache C-179/16 hat sich der Gerichtshof der Europäischen Union («EuGH») zu den Voraussetzungen einer kartellrechtswidrigen Absprache im Kontext eines Arzneimittelfalles aus Italien geäussert, bei dem der nicht-bestimmungsgemässe Gebrauch («Off-label-​Anwendung») eines Arzneimittels eine entscheidende Rolle spielt.

Vertrauen in Geld

Money plays a crucial role in the traditional and in the digital economy. But money only constitutes a value if civil society has trust and confidence in the realizability of currency «investments» (acceptance of money, exchange partner, stability of currency). Recently proposals have been made to redefine the monetary instruments and to eliminate cash; notwithstanding the economic background of…

Die regulatorische Antwort auf FinTech: Evolution oder Revolution? Eine Verortung aktueller Entwicklungen

While technological improvements have shaped the financial industry and its regulation for decades, FinTech is the buzzword of the hour. Rapidly developing digital technologies allow new market entrants to disrupt the traditional intermediary-based provision of financial services (I.). These new businesses – in particular those that operate payment systems or engage in crowdfunding – may clash…