Suchergebnisse für personal data

Editorial

Late in the spring (sometimes very late), the second issue of this journal brings its readers a bouquet of highlights on the laws and regulation of banking and finance. This issue reflects some trends…

Consolidation in the Swiss Portfolio Management Industry – Selected Aspects of M&A Transactions

In the ongoing consolidation wave sweeping the wealth management industry in Switzerland and the rest of the world, Swiss portfolio managers have to be alert. Both as a potential buyer or seller, there are important points to keep in mind to gauge whether a share deal or asset deal is the right choice, whether the timing is right, and how to maximise the value of the transaction, while limiting…

Das schweizerische Bankprivatrecht 2020 | Le droit bancaire privé suisse 2020

Das Jahr 2020 war in vielerlei Hinsicht aussergewöhnlich. Demgegenüber bewegen sich die Entscheide zum privaten Bankrecht, die in diesem Jahr gefällt wurden, zu einem Grossteil im Rahmen des…

Annonce des violations de la sécurité des données: une nouvelle obligation de la nLPD

The data security principle (art. 8 of the revised Federal Act on Data Protection (rFADP) requires that the controller and when applicable the processor take all the necessary measures to maintain a sufficient level of security when processing personal data, including to prevent any data breach. Nevertheless, data breaches can occur and when so, the controller shall react quickly in order to…

Das Profiling im neuen Datenschutzrecht

The revised Data Protection Act will introduce the concept of profiling into Swiss law. This term will be defined in the same way as in the European General Data Protection Regulation (GDPR) as any automated processing of personal data to evaluate certain personal aspects relating to a natural person. Unlike the GDPR, the new Act will create a special category of high-risk profiling, which is…

Datenportabilität und ihre Umsetzung

The right to data portability will be introduced, as a first for Switzerland, with the revised Swiss Data Protection Act. Inspired by the GDPR but with a “Swiss finish”, data subjects may (if certain conditions are met) request the controller to transfer “their” personal data to them or another controller. However, a number of questions remain open, for example: Which type of data is subject to…

Die Strafbestimmungen des neuen DSG

As soon as the revised Swiss Federal Act on Data Protection (DPA) will come into force, the cantonal prosecuting authorities will be entitled to impose heavy fines of up to CHF 250 000 on the person responsible for non-compliant behavior. While this may seem to be a low figure compared to the high figures provided for by the GDPR, the fines under the revised DPA are of personal nature and may not…

Transparence des traitements de données personnelles opérés par les organes fédéraux: un pas en avant, deux en arrière

The recent revisions of European data protection instruments have been marked by the desire to give data subjects back control over their data, in particular by improving the transparency of data processing. The same desire for enhanced visibility and intelligibility has motivated the Swiss legislator in the revision of the Data Protection Act. The fact remains that the objective has only been…

Daten-Governance und Cloud Banking im neuen Datenschutzrechtsumfeld

Banking is a data-sensitive business. With the adoption of the new Data Protection Act the data protection level will also be increased in Switzerland, amongst others in the data security context. Banks, often using cloud services for efficiency reasons, will have to adapt their data governance framework in the near future: Data processing and storing must meet the data protection and data…

Dokumentenherausgabe nach FIDLEG vs. datenschutzrechtliche Auskunftserteilung

The claim for disclosure according to FinSA is supposed to enable the customer to obtain evidence to effectively enforce his or her rights from the contractual relationship with the financial service provider. The right to request information according to FADP is meant to enable the data subject to control his or her personal data and thus to protect and enforce his or her personal rights…