Suchergebnisse für data protection

Annonce des violations de la sécurité des données: une nouvelle obligation de la nLPD

The data security principle (art. 8 of the revised Federal Act on Data Protection (rFADP) requires that the controller and when applicable the processor take all the necessary measures to maintain a sufficient level of security when processing personal data, including to prevent any data breach. Nevertheless, data breaches can occur and when so, the controller shall react quickly in order to…

Das Profiling im neuen Datenschutzrecht

The revised Data Protection Act will introduce the concept of profiling into Swiss law. This term will be defined in the same way as in the European General Data Protection Regulation (GDPR) as any automated processing of personal data to evaluate certain personal aspects relating to a natural person. Unlike the GDPR, the new Act will create a special category of high-risk profiling, which is…

Datenportabilität und ihre Umsetzung

The right to data portability will be introduced, as a first for Switzerland, with the revised Swiss Data Protection Act. Inspired by the GDPR but with a “Swiss finish”, data subjects may (if certain conditions are met) request the controller to transfer “their” personal data to them or another controller. However, a number of questions remain open, for example: Which type of data is subject to…

Die Strafbestimmungen des neuen DSG

As soon as the revised Swiss Federal Act on Data Protection (DPA) will come into force, the cantonal prosecuting authorities will be entitled to impose heavy fines of up to CHF 250 000 on the person responsible for non-compliant behavior. While this may seem to be a low figure compared to the high figures provided for by the GDPR, the fines under the revised DPA are of personal nature and may not…

Transparence des traitements de données personnelles opérés par les organes fédéraux: un pas en avant, deux en arrière

The recent revisions of European data protection instruments have been marked by the desire to give data subjects back control over their data, in particular by improving the transparency of data processing. The same desire for enhanced visibility and intelligibility has motivated the Swiss legislator in the revision of the Data Protection Act. The fact remains that the objective has only been…

Können Investitionskontrollen für gleich lange Spiesse sorgen?

Amidst global protectionist tendencies and in view of major takeovers by foreign state-controlled companies calls for increased public control of foreign investment have been getting louder around the globe. Most recently, the Swiss parliament approved a motion obliging the Swiss government to prepare a draft bill regarding foreign investment screening. Apart from national security concerns,…

Recent developments in Swiss competition law

1. In economic theory, transparency of information is usually seen as a positive condition, which contributes to effective competition. When one turns to competition law, however, it seems that…

Daten-Governance und Cloud Banking im neuen Datenschutzrechtsumfeld

Banking is a data-sensitive business. With the adoption of the new Data Protection Act the data protection level will also be increased in Switzerland, amongst others in the data security context. Banks, often using cloud services for efficiency reasons, will have to adapt their data governance framework in the near future: Data processing and storing must meet the data protection and data…

«Open Banking» in der Schweiz – Herausforderungen an den Schnittstellen von Finanzmarkt-, Datenschutz- und Kartellrecht

«Open Banking» challenges traditional financial institutions in Switzerland and around the world. It poses strategic as well as legal compliance challenges. The present study delimits the (sometimes synonymously used) terms «Open Banking» and «API Banking» to the effect that Open Banking presupposes an access to the banking account (XS2A) on the basis of non-discriminatory criteria. It thus…

Entreprises et Big Data: peut-on forcer les entreprises à partager leurs données non-personnelles (par des licences obligatoires ou des licences „FRAND“)?

In the digital age where big data is of key value, companies generate a massive amount of data and make intensive use of data. Given that companies may depend on the access to non-personal data (industrial data) held by other companies to remain competitive, the question arises as to whether companies should be forced to share their non-personal data with each other (B2B data sharing) on the…