-
- Art. 5a FC
- Art. 6 FC
- Art. 10 FC
- Art. 16 FC
- Art. 17 FC
- Art. 20 FC
- Art. 22 FC
- Art. 29a FC
- Art. 30 FC
- Art. 32 FC
- Art. 42 FC
- Art. 43 FC
- Art. 43a FC
- Art. 55 FC
- Art. 56 FC
- Art. 60 FC
- Art. 68 FC
- Art. 75b FC
- Art. 77 FC
- Art. 96 para. 2 lit. a FC
- Art. 110 FC
- Art. 117a FC
- Art. 118 FC
- Art. 123b FC
- Art. 136 FC
- Art. 166 FC
-
- Art. 11 CO
- Art. 12 CO
- Art. 50 CO
- Art. 51 CO
- Art. 84 CO
- Art. 143 CO
- Art. 144 CO
- Art. 145 CO
- Art. 146 CO
- Art. 147 CO
- Art. 148 CO
- Art. 149 CO
- Art. 150 CO
- Art. 701 CO
- Art. 715 CO
- Art. 715a CO
- Art. 734f CO
- Art. 785 CO
- Art. 786 CO
- Art. 787 CO
- Art. 788 CO
- Transitional provisions to the revision of the Stock Corporation Act of June 19, 2020
- Art. 808c CO
-
- Art. 2 PRA
- Art. 3 PRA
- Art. 4 PRA
- Art. 6 PRA
- Art. 10 PRA
- Art. 10a PRA
- Art. 11 PRA
- Art. 12 PRA
- Art. 13 PRA
- Art. 14 PRA
- Art. 15 PRA
- Art. 16 PRA
- Art. 17 PRA
- Art. 19 PRA
- Art. 20 PRA
- Art. 21 PRA
- Art. 22 PRA
- Art. 23 PRA
- Art. 24 PRA
- Art. 25 PRA
- Art. 26 PRA
- Art. 27 PRA
- Art. 29 PRA
- Art. 30 PRA
- Art. 31 PRA
- Art. 32 PRA
- Art. 32a PRA
- Art. 33 PRA
- Art. 34 PRA
- Art. 35 PRA
- Art. 36 PRA
- Art. 37 PRA
- Art. 38 PRA
- Art. 39 PRA
- Art. 40 PRA
- Art. 41 PRA
- Art. 42 PRA
- Art. 43 PRA
- Art. 44 PRA
- Art. 45 PRA
- Art. 46 PRA
- Art. 47 PRA
- Art. 48 PRA
- Art. 49 PRA
- Art. 50 PRA
- Art. 51 PRA
- Art. 52 PRA
- Art. 53 PRA
- Art. 54 PRA
- Art. 55 PRA
- Art. 56 PRA
- Art. 57 PRA
- Art. 58 PRA
- Art. 59a PRA
- Art. 59b PRA
- Art. 59c PRA
- Art. 62 PRA
- Art. 63 PRA
- Art. 67 PRA
- Art. 67a PRA
- Art. 67b PRA
- Art. 75 PRA
- Art. 75a PRA
- Art. 76 PRA
- Art. 76a PRA
- Art. 90 PRA
-
- Vorb. zu Art. 1 FADP
- Art. 1 FADP
- Art. 2 FADP
- Art. 3 FADP
- Art. 5 lit. f und g FADP
- Art. 6 Abs. 6 and 7 FADP
- Art. 7 FADP
- Art. 10 FADP
- Art. 11 FADP
- Art. 12 FADP
- Art. 14 FADP
- Art. 15 FADP
- Art. 19 FADP
- Art. 20 FADP
- Art. 22 FADP
- Art. 23 FADP
- Art. 25 FADP
- Art. 26 FADP
- Art. 27 FADP
- Art. 31 para. 2 lit. e FADP
- Art. 33 FADP
- Art. 34 FADP
- Art. 35 FADP
- Art. 38 FADP
- Art. 39 FADP
- Art. 40 FADP
- Art. 41 FADP
- Art. 42 FADP
- Art. 43 FADP
- Art. 44 FADP
- Art. 44a FADP
- Art. 45 FADP
- Art. 46 FADP
- Art. 47 FADP
- Art. 47a FADP
- Art. 48 FADP
- Art. 49 FADP
- Art. 50 FADP
- Art. 51 FADP
- Art. 54 FADP
- Art. 57 FADP
- Art. 58 FADP
- Art. 60 FADP
- Art. 61 FADP
- Art. 62 FADP
- Art. 63 FADP
- Art. 64 FADP
- Art. 65 FADP
- Art. 66 FADP
- Art. 67 FADP
- Art. 69 FADP
- Art. 72 FADP
- Art. 72a FADP
-
- Art. 2 CCC (Convention on Cybercrime)
- Art. 3 CCC (Convention on Cybercrime)
- Art. 4 CCC (Convention on Cybercrime)
- Art. 5 CCC (Convention on Cybercrime)
- Art. 6 CCC (Convention on Cybercrime)
- Art. 7 CCC (Convention on Cybercrime)
- Art. 8 CCC (Convention on Cybercrime)
- Art. 9 CCC (Convention on Cybercrime)
- Art. 11 CCC (Convention on Cybercrime)
- Art. 12 CCC (Convention on Cybercrime)
- Art. 25 CCC (Convention on Cybercrime)
- Art. 29 CCC (Convention on Cybercrime)
- Art. 32 CCC (Convention on Cybercrime)
- Art. 33 CCC (Convention on Cybercrime)
- Art. 34 CCC (Convention on Cybercrime)
FEDERAL CONSTITUTION
CODE OF OBLIGATIONS
FEDERAL LAW ON PRIVATE INTERNATIONAL LAW
LUGANO CONVENTION
CODE OF CRIMINAL PROCEDURE
CIVIL PROCEDURE CODE
FEDERAL ACT ON POLITICAL RIGHTS
CIVIL CODE
FEDERAL ACT ON CARTELS AND OTHER RESTRAINTS OF COMPETITION
FEDERAL ACT ON INTERNATIONAL MUTUAL ASSISTANCE IN CRIMINAL MATTERS
DEBT ENFORCEMENT AND BANKRUPTCY ACT
FEDERAL ACT ON DATA PROTECTION
SWISS CRIMINAL CODE
CYBERCRIME CONVENTION
In a nutshell
Art. 15 FADP lists certain further obligations for a data protection representative pursuant to Art. 14 FADP. The representative must keep a record of the processing activities for the controller(s) and provide the FDPIC with the relevant information upon request. Furthermore, the representative must provide data subjects with information on the exercise of their rights upon request.
I. general
1 Art. 15 FADP enumerates certain further obligations of the data protection representative in addition to the obligations under Art. 14 para. 2 and 3 FADP (function as contact point, Art. 14 para. 2 FADP, and publication of contact details, Art. 14 para. 3 FADP). The enumeration in Art. 15 FADP is to be understood as non-exhaustive due to the broad role of the representation as a contact point.
II. duties of the Data Protection Representative
A. list of processing activities (para. 1)
2 According to the wording, the data protection representative must keep a register of the processing activities of the data controller (para. 1). This obligation goes further than the obligation under Art. 30 para. 1 DSGVO, according to which the EU data protection representation must keep a register only for processing activities that are subject to its competence. This excessive obligation, which in any case goes significantly further than the DSGVO, is likely to be a legislative oversight.
3 The exemption for companies with fewer than 250 employees pursuant to Art. 12 para. 5 FADP in connection with Art. 24 DPA does not apply. Art. 24 DPA does not apply to the data protection representation. According to Art. 14 para. 1 lit. a FADP, the data protection representative must only be designated if the processing by the data controller poses a high risk to the personality of the data subjects, among other things. This corresponds to the general risk-based approach of the FADP, as expressed in particular in Art. 24 FADP.
4 The information in the directory must comply with Art. 12 para. 2 FADP. In practice, the controller will keep a partial directory of processing activities that have an impact on Switzerland and provide a copy to the representation.
B. obligation to notify the FDPIC (para. 2)
5 The representation must communicate the information contained in the directory to the FDPIC upon request (para. 2), even without an administrative procedure. In practice, the representation is likely to communicate the directory to the FDPIC instead of providing only the information contained therein.
6 The obligation thus applies independently of the duty of the data controller to provide the FADP with all necessary documents in the context of an investigation (Art. 49 para. 3 FADP) and also independently of the power of the FADP to order access to all necessary lists of processing activities in the context of an investigation (Art. 50 para. 1 lit. a FADP).
7 The FDPIC does not have to take the route of international mutual legal assistance with the representation as a contact point in order to obtain the information in the directory. The representation in Switzerland may only communicate information that is already available.
8 A voluntarily designated representation does not have to maintain a directory as such.
C. information to data subjects (para. 3)
9 As a contact point (Art. 14 para. 2 FADP), the data protection representation must provide information to data subjects on request about the exercise of their rights under Art. 25 et seq. FADP upon request.
10 The representation must enable requesting data subjects to exercise their rights. The representation must inform data subjects, for example, at which contact details and by which means they can exercise their right to information (Art. 25 ff. FADP) vis-à-vis the controller and whether the controller has appointed a data protection advisor (Art. 10 FADP) who can be consulted (Art. 10 para. 2 FADP).
11 The duty of the data controller to provide information (Art. 19 ff. FADP) remains unaffected by the duty of the representation to provide information. The data controller may also instruct the representative to provide other information to the data subjects.
Bibliography
Husi-Stämpfli Sandra, Kommentierung zu Art. 15 DSG, in: Baeriswyl Bruno/Pärli Kurt/Blonski Dominika (Hrsg.), Datenschutzgesetz, Stämpflis Handkommentar, 2. Aufl., Bern 2023. (zit. SHK-Husi-Stämpfli, Art. 15 DSG).
Eidgenössisches Justiz- und Polizeidepartement, EU-Datenschutzgrundverordnung DSGVO: Erläuterungen betreffend die Pflicht zur Meldung von Verletzungen des Schutzes personenbezogener Daten nach Art. 33 DSGVO, 4.9.2018 (zit. EJPD, Erläuterungen).
Gogniat Yves, Die Datenschutzgrundverordnung im Kontext von Art. 271 StGB, in: Jusletter vom 19.11.2018 (zit. Gogniat, Art. 271 StGB).
Rosenthal David, Das neue Datenschutzgesetz, in: Jusletter vom 16.11.2020 (zit. Rosenthal, Jusletter).