Suchergebnisse für Einwilligung der betroffenen Personen

KI Sandboxen für die Schweiz?

A sandbox allows companies to test innovative products, services, and business models in a live market environment. Stemming originally from the FinTech sector, sandboxes have recently gained importance, especially in the context of artificial intelligence, where they are intended to serve to resolve the conflict between data protection and innovation by allowing innovation while ensuring that…

Editorial

Das europäische Datenschutzrecht ist seit mehreren Jahren in Bewegung: Im Mai 2016 hat die EU die Datenschutzgrundverordnung (DSGVO) vorgelegt, die einen einheitlichen Rechtsrahmen für das…

Feuerproben des neuen Datenschutzgesetzes – Ein «tour d’horizon»

In the area of conflict between diverging individual needs and competing societal interests, a multitude of «trial by fire» awaits the new federal data protection law. One of these is the smartphone, which, as an always-available means of mobile identification and documentation, is well on its way to become an electronic anklet for everyone.

Der «grosse Bruder» DSGVO und das revDSG: Ein vergleichender Überblick

The revised Swiss Data Protection Act is very much influenced by European legislation. In the debate and discussions, the GDPR was and still is in the foreground as the «big brother». However, it is not the GDPR that is the guiding principle in the interpretation of the provisions taken from European law, but the Convention 108+ of the Council of Europe and the Police and Justice Directive of the…

Informationspflichten und Auskunftsrecht nach dem neuen Datenschutzrecht

The revision of the Data Protection Act aims to improve transparency for data subjects as to which of their data is processed and how. In order to achieve better transparency and to incorporate legislative developments at the European level, the information obligations for data controllers and the rights of data subjects to obtain information, have been strengthened in the course of the revision…

Das Profiling im neuen Datenschutzrecht

The revised Data Protection Act will introduce the concept of profiling into Swiss law. This term will be defined in the same way as in the European General Data Protection Regulation (GDPR) as any automated processing of personal data to evaluate certain personal aspects relating to a natural person. Unlike the GDPR, the new Act will create a special category of high-risk profiling, which is…

Datenportabilität und ihre Umsetzung

The right to data portability will be introduced, as a first for Switzerland, with the revised Swiss Data Protection Act. Inspired by the GDPR but with a “Swiss finish”, data subjects may (if certain conditions are met) request the controller to transfer “their” personal data to them or another controller. However, a number of questions remain open, for example: Which type of data is subject to…

Die Strafbestimmungen des neuen DSG

As soon as the revised Swiss Federal Act on Data Protection (DPA) will come into force, the cantonal prosecuting authorities will be entitled to impose heavy fines of up to CHF 250 000 on the person responsible for non-compliant behavior. While this may seem to be a low figure compared to the high figures provided for by the GDPR, the fines under the revised DPA are of personal nature and may not…

Daten-Governance und Cloud Banking im neuen Datenschutzrechtsumfeld

Banking is a data-sensitive business. With the adoption of the new Data Protection Act the data protection level will also be increased in Switzerland, amongst others in the data security context. Banks, often using cloud services for efficiency reasons, will have to adapt their data governance framework in the near future: Data processing and storing must meet the data protection and data…

«Open Banking» in der Schweiz – Herausforderungen an den Schnittstellen von Finanzmarkt-, Datenschutz- und Kartellrecht

«Open Banking» challenges traditional financial institutions in Switzerland and around the world. It poses strategic as well as legal compliance challenges. The present study delimits the (sometimes synonymously used) terms «Open Banking» and «API Banking» to the effect that Open Banking presupposes an access to the banking account (XS2A) on the basis of non-discriminatory criteria. It thus…