Suchergebnisse für Verarbeitung personenbezogener Daten

Sekundärnutzung von Mobilitätsdaten: Infrastruktur und Governance bei Mobility-as-a-Service

Proponents and opponents hotly debate the so-called secondary use of data in sectors as diverse as health, education, energy and mobility. The parallelism of these discussions has led politicians to call for a framework law on the secondary use of data. By choosing Mobility-as-a-Service (MaaS), a promising service in the mobility sector, this article explores two connected features such a…

Editorial

Das europäische Datenschutzrecht ist seit mehreren Jahren in Bewegung: Im Mai 2016 hat die EU die Datenschutzgrundverordnung (DSGVO) vorgelegt, die einen einheitlichen Rechtsrahmen für das…

Der «grosse Bruder» DSGVO und das revDSG: Ein vergleichender Überblick

The revised Swiss Data Protection Act is very much influenced by European legislation. In the debate and discussions, the GDPR was and still is in the foreground as the «big brother». However, it is not the GDPR that is the guiding principle in the interpretation of the provisions taken from European law, but the Convention 108+ of the Council of Europe and the Police and Justice Directive of the…

Datenportabilität und ihre Umsetzung

The right to data portability will be introduced, as a first for Switzerland, with the revised Swiss Data Protection Act. Inspired by the GDPR but with a “Swiss finish”, data subjects may (if certain conditions are met) request the controller to transfer “their” personal data to them or another controller. However, a number of questions remain open, for example: Which type of data is subject to…

Die Strafbestimmungen des neuen DSG

As soon as the revised Swiss Federal Act on Data Protection (DPA) will come into force, the cantonal prosecuting authorities will be entitled to impose heavy fines of up to CHF 250 000 on the person responsible for non-compliant behavior. While this may seem to be a low figure compared to the high figures provided for by the GDPR, the fines under the revised DPA are of personal nature and may not…

Daten-Governance und Cloud Banking im neuen Datenschutzrechtsumfeld

Banking is a data-sensitive business. With the adoption of the new Data Protection Act the data protection level will also be increased in Switzerland, amongst others in the data security context. Banks, often using cloud services for efficiency reasons, will have to adapt their data governance framework in the near future: Data processing and storing must meet the data protection and data…

Dokumentenherausgabe nach FIDLEG vs. datenschutzrechtliche Auskunftserteilung

The claim for disclosure according to FinSA is supposed to enable the customer to obtain evidence to effectively enforce his or her rights from the contractual relationship with the financial service provider. The right to request information according to FADP is meant to enable the data subject to control his or her personal data and thus to protect and enforce his or her personal rights…

«Open Banking» in der Schweiz – Herausforderungen an den Schnittstellen von Finanzmarkt-, Datenschutz- und Kartellrecht

«Open Banking» challenges traditional financial institutions in Switzerland and around the world. It poses strategic as well as legal compliance challenges. The present study delimits the (sometimes synonymously used) terms «Open Banking» and «API Banking» to the effect that Open Banking presupposes an access to the banking account (XS2A) on the basis of non-discriminatory criteria. It thus…

Editorial

Die Digitalisierung verändert immer weitere Be­reiche des täglichen Lebens und der Tätigkeiten von Unternehmen und Behörden. Betroffen sind auch Handlungen, die seit jeher von Menschen ausgeführt…

Automatisierte Entscheidungen: Grundfragen aus der Perspektive des Privatrechts

Data protection law addresses the issue that more and more (complex) decisions are taken automatically. A closer look at the regulatory approaches of the General Data Protection Regulation (GDPR), the Council of Europe’s Convention 108 and the draft Swiss Federal Act on Data Protection (draft FADP) leads to two conclusions. On the one hand, the scope of application of these provisions is too…