{"id":41679,"date":"2021-07-22T15:59:23","date_gmt":"2021-07-22T13:59:23","guid":{"rendered":"https:\/\/www.arca24.com\/en\/?p=41679"},"modified":"2023-08-17T11:42:59","modified_gmt":"2023-08-17T09:42:59","slug":"the-new-swiss-law-on-personal-data-protection","status":"publish","type":"post","link":"https:\/\/www.arca24.com\/en\/the-new-swiss-law-on-personal-data-protection\/","title":{"rendered":"The new Swiss law on personal data protection"},"content":{"rendered":"

The new Swiss law on personal data protection<\/span><\/h3>\n<\/div>
<\/div>

GDPR for HR<\/span><\/a> | 07.22.2021<\/p>\n<\/div>

On 25TH September 2021 the Swiss National Council adopted the revision of the new LPD. In structuring the new Data Protection Law, the Federal Council and the Parliament could not fail to take into account the Convention STE 108 regarding the automated processing of persons\u2019 personal data, to which Switzerland has adhered.<\/em><\/strong><\/p>\n<\/div>

<\/div>
<\/span><\/div>
<\/div>

On last January,<\/strong> the deadline for the referendum expired unused. Therefore, the new revised LPD will presumably come into force in the spring of 2022. By this deadline, private companies and federal bodies will have to have revised their methods of processing personal data in order to comply with the provisions of the new regulatory text.<\/p>\n

Recently, the Federal Personal Data Processing and Transparency Officer<\/strong> (\u201cIFPDT\u201d) published a summary containing the major innovations introduced by the new text.<\/p>\n

First of all, the new LPD aims to protect only the personal data of natural persons (as already provided for by the GDPR). Therefore, the protection of the personal data of legal persons is excluded. Furthermore, the concepts of “privacy by default”<\/strong> and “privacy by design”<\/strong> are introduced.<\/p>\n

The GDPR has introduced the role of the Data Processor Officer. The new LPD, specularly, establishes the figure of the company consultant on the processing of personal data who can be an internal or external professional, as long as he carries out his duties in a hierarchically independent manner. This new role, whose appointment is mandatory only for federal bodies and not for private companies, has consultancy and training functions, as well as intermediation between the company and the IFPDT.<\/p>\n

With regard to the drafting of an Impact Statement, the new text merely reiterates its use in the case of high risk treatments. Furthermore, the new text adopted the possibility to develop and to adopt own codes of conduct, as well as to provide for specific certification.<\/p>\n

With reference to the introduction of the obligation to keep a Register of Treatments,<\/strong> it should be noted that this will only exist for companies with more than 250 employees and for those companies that implement potentially risky large-scale treatments.<\/p>\n

Another fundamental point is that of the communication of personal data abroad. This action is only permitted towards countries to which the Federal Council has given its consent. Otherwise, transmission can only take place if protection is ensured through the use of other procedures. In particular, with regard to the publication of data abroad on cloud systems, the new legislation introduces the obligation of specific indication of the recipient countries of the data transfer, in addition to the definition of the organizational and security procedures expressly adopted.<\/p>\n

The new LPD is very close to what has already been established by the GDPR regarding the rights that can be exercised by the interested parties and the contents of the information to be made to the interested parties before proceeding with the treatment.<\/p>\n

From the point of view of the function of the IFPDT, in the future this body will be entitled to act in the event of any violation of the provisions of the new LPD. The penalties are up to 250\u2019000 CHF for willful misconduct. Failure to comply with the provisions, on the other hand, is punishable up to 50’000 CHF for natural persons only, but in the future it is thought to be able to extend the punishment also to the companies themselves.<\/p>\n

Obviously, the new LPD largely accepts what has already been established by the GDPR which in fact has been regularly applied by Swiss companies for some years, while maintaining some typical characteristics of Swiss law, among which the brevity and pragmatism. Now it is up to all companies to take action to foresee alignment with the new provisions by the beginning of next year.<\/p>\n

Apparently, all those companies that adopt adequate management tools that allow them to intervene easily and to adapt from time to time to the standards required by the various applicable regulations remain at an advantage.<\/strong><\/p>\n<\/div>

<\/div>

Learn more about “privacy by default\u201d<\/strong> and \u201cprivacy by design\u201d<\/strong> in this articles<\/a> on GDPR for HR.<\/p>\n<\/div><\/div><\/div>

Company<\/span><\/h5>\n<\/div>
<\/div><\/div>

Arca24 is an HR Tech Factory specialised in the development of cloud software for the human resources sector.<\/p>\n<\/div>

Do you want to keep updated with the latest news? Follow us on:<\/span><\/p>\n<\/div><\/div><\/div>

<\/a><\/span><\/div><\/div><\/div>
<\/a><\/span><\/div><\/div><\/div>
<\/a><\/span><\/div><\/div><\/div>
<\/a><\/span><\/div><\/div><\/div>
<\/a><\/span><\/div><\/div><\/div>
<\/div><\/div><\/div>
<\/div><\/div>
<\/div>
Reference product<\/span><\/h5>\n<\/div>
<\/div><\/div>
<\/span><\/div>

Ngage – Staffing Agency Software<\/span><\/h4>\n

Ngage (ATS+CRM) is a solution developed to support staffing and employment agencies throughout the entire production cycle. It optimizes and digitalize the processes of talent acquisition, customer relationship and administrative management.<\/p>\n<\/div>

Find out more<\/span><\/a><\/div>
<\/div><\/div>
<\/span><\/div>

Talentum \u2013 Talent Management Software<\/span><\/h4>\n

Talentum is a complete and intuitive end-to-end solution that allows the HR department to acquire, manage and optimise the workforce throughout the employee\u2019s life cycle (from search and selection activities to the onboarding of selected candidates).<\/p>\n<\/div>

Find out more<\/span><\/a><\/div><\/div><\/div>

Other items from category “GDPR for HR”<\/span><\/h4>\n<\/div>