We would like to ensure that you are still receiving content that you find useful – please confirm that you would like to continue to receive ILO newsletters.
09 October 2020
On 25 September 2020 Parliament approved the final draft of the revised Data Protection Act (rev-DPA).(1) The rev-DPA is expected to enter into force in 2022. However, it is subject to a facultative referendum and the corresponding ordinance will be adapted accordingly – thus, the rev-DPA is still a work in progress.
The revision aims to modernise Switzerland's data protection landscape in line with the more sophisticated EU legislation, particularly the EU General Data Protection Regulation, which entered into force in 2018.
Accordingly, the rev-DPA comes with stricter constraints and requirements than those that apply under the current DPA. The new powers of the Federal Data Protection and Information Commissioner (FDPIC) (Article 49 et seq of the rev-DPA) and the potential criminal fines of up to Sfr250,000 imposed on the individuals responsible for certain types of infringement (Article 60 et seq of the rev-DPA) strengthen its enforcement by increasing exposure for controllers and processors that are subject to the rev-DPA.
In this respect, foreign controllers and processors should assess whether they are subject to the rev-DPA pursuant to Article 3 thereof, which governs the territorial scope of application of the rev-DPA following the effects doctrine. Thus, all data processing activities that have an effect on Switzerland are subject to the rev-DPA, regardless of where the respective processing is taking place.
The rev-DPA will increase companies' duties. In particular, new obligations will be imposed in relation to transparency and documentation matters, as well as specific risk-related processing activities. In particular, the following new requirements are likely to have an impact on most companies:
Businesses are encouraged to use the time until the rev-DPA's entry into force to assess its impact on their activities and start implementing or elaborating processes that will comply with the revised act and stay up to date with ongoing developments.(2)
For further information on this topic please contact Jürg Schneider or Noémi Ziegler at Walder Wyss by telephone (+41 58 658 58 58) or email (firstname.lastname@example.org or email@example.com). The Walder Wyss website can be accessed at www.walderwyss.com.
(1) The rev-DPA is available in German, French and Italian. An unofficial English translation may be found here. Moreover, an updated comparison chart in German of the current DPA, the Federal Council's draft rev-DPA and the final version of the rev-DPA can be found here.
The materials contained on this website are for general information purposes only and are subject to the disclaimer.
ILO is a premium online legal update service for major companies and law firms worldwide. In-house corporate counsel and other users of legal services, as well as law firm partners, qualify for a free subscription.