{"id":1365,"date":"2023-07-14T08:47:38","date_gmt":"2023-07-14T06:47:38","guid":{"rendered":"https:\/\/moorlaw.digicube.dev\/rechtsgebiet\/data-protection-representation-in-switzerland\/"},"modified":"2023-11-18T12:28:42","modified_gmt":"2023-11-18T11:28:42","slug":"data-protection-representation-in-switzerland","status":"publish","type":"rechtsgebiet","link":"https:\/\/moor-law.ch\/en\/law-field\/data-protection-law\/data-protection-representation-in-switzerland\/","title":{"rendered":"Data protection representation in Switzerland"},"content":{"rendered":"\n<p>Since September 1, 2023, companies located outside Switzerland that process personal data of individuals in Switzerland must designate a data protection representative in Switzerland under certain conditions (Art. 14 of the Swiss Federal Act on Data Protection, nDSG).<\/p>\n\n<p>A data protection representative in Switzerland is not required in every case of processing personal data.<\/p>\n<div class=\"gb-container gb-container-c064a007\" id=\"wer-muss\">\n\n<h2 class=\"wp-block-heading\" id=\"h-wer-muss-eine-datenschutz-vertretung-bezeichnen\">Who must appoint a data protection representative?<\/h2>\n\n\n\n<p>This requirement applies only to companies that offer goods or services in Switzerland or monitor the behavior of individuals in Switzerland. In order for the obligation to designate a data protection representative to apply, additional conditions must be met:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The data processing is substantial.<\/li>\n\n\n\n<li>The data processing is carried out on a regular basis.<\/li>\n\n\n\n<li>The data processing poses a high risk to the privacy of the affected individuals.<\/li>\n<\/ul>\n\n\n\n<p>A high risk may arise particularly from the nature, scope, circumstances, and purpose of the data processing, especially in cases involving the use of new technologies. A high risk exists, for example, when high-risk profiling or extensive processing of particularly sensitive personal data is planned (cf. Art. 22(2) of the nDSG).<\/p>\n\n\n\n<p>The Federal Data Protection and Information Commissioner (FDPIC) may order a company based abroad to designate a data protection representative in Switzerland (Art. 51(4) of the nDSG).<\/p>\n\n<\/div>\n<hr class=\"wp-block-separator has-text-color has-accent-color has-alpha-channel-opacity has-accent-background-color has-background category-separator\"\/>\n<div class=\"gb-container gb-container-07e05db5\" id=\"aufgaben\">\n\n<h2 class=\"wp-block-heading\" id=\"h-aufgaben-der-vertretung\">Tasks of the representative<\/h2>\n\n\n\n<p>The data protection representative has the following tasks:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Maintaining a record of processing activities of the foreign company with minimal information in accordance with Art. 12 para. 2 of the nDSG. <\/li>\n\n\n\n<li>Acting as a contact point for the FDPIC.<\/li>\n\n\n\n<li>Acting as a contact point for affected individuals.<\/li>\n<\/ul>\n\n\n\n<p>The data protection representative depends on the foreign company based outside Switzerland to accurately maintain and provide the record of processing activities.<\/p>\n\n<\/div>\n<hr class=\"wp-block-separator has-text-color has-accent-color has-alpha-channel-opacity has-accent-background-color has-background\"\/>\n\n<div class=\"wp-block-group\"><div class=\"wp-block-group__inner-container is-layout-constrained wp-block-group-is-layout-constrained\"><div class=\"gb-container gb-container-98a7c598\">\n<div class=\"gb-container gb-container-11a0998e\">\n\n<p><strong>Services<\/strong><\/p>\n\n\n\r\n<section id=\"digicube-block-653b8880876e9\"  class=\"chooseposttype-wrap\" >\r\n    <ul class=\"cpt-posts\">\r\n                   <li class=\"custom-block-post\">\r\n                  <a href=\"https:\/\/moor-law.ch\/en\/service\/legal-services-for-corporates\/\">Legal Services for Corporates<\/a>\r\n                <\/li>\r\n                   <\/ul>\r\n<\/section> \n<\/div>\n\n<div class=\"gb-container gb-container-25f5bccc\">\n\n<p><strong><strong>Further reading<\/strong><\/strong><\/p>\n\n\n\r\n<section id=\"digicube-block-653b888087772\"  class=\"chooseposttype-wrap\" >\r\n    <ul class=\"cpt-posts\">\r\n                   <li class=\"custom-block-post\">\r\n                  <a href=\"https:\/\/moor-law.ch\/en\/law-field\/data-protection-law\/what-should-smes-do\/\">What should SMEs do?<\/a>\r\n                <\/li>\r\n                              <li class=\"custom-block-post\">\r\n                  <a href=\"https:\/\/moor-law.ch\/en\/law-field\/data-protection-law\/new-swiss-data-protection-law\/\">New Swiss Data Protection Law<\/a>\r\n                <\/li>\r\n                              <li class=\"custom-block-post\">\r\n                  <a href=\"https:\/\/moor-law.ch\/en\/law-field\/data-protection-law\/documentation-obligations\/\">Data protection Documentation Obligations<\/a>\r\n                <\/li>\r\n                              <li class=\"custom-block-post\">\r\n                  <a href=\"https:\/\/moor-law.ch\/en\/law-field\/data-protection-law\/data-protection-register-of-processing-activities\/\">Data Protection Register of Processing Activities<\/a>\r\n                <\/li>\r\n                   <\/ul>\r\n<\/section> \n<\/div>\n<\/div><\/div><\/div>\n\n<hr class=\"wp-block-separator has-text-color has-accent-color has-alpha-channel-opacity has-accent-background-color has-background\"\/>\n","protected":false},"excerpt":{"rendered":"<p>A duty to appoint a data protection representative in Switzerland does not apply to all data processing<\/p>\n","protected":false},"featured_media":0,"parent":0,"menu_order":25,"template":"","rechtsgebiet-kategorie":[41],"class_list":["post-1365","rechtsgebiet","type-rechtsgebiet","status-publish","hentry","rechtsgebiet-kategorie-data-protection-law"],"acf":[],"_links":{"self":[{"href":"https:\/\/moor-law.ch\/en\/wp-json\/wp\/v2\/rechtsgebiet\/1365","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/moor-law.ch\/en\/wp-json\/wp\/v2\/rechtsgebiet"}],"about":[{"href":"https:\/\/moor-law.ch\/en\/wp-json\/wp\/v2\/types\/rechtsgebiet"}],"wp:attachment":[{"href":"https:\/\/moor-law.ch\/en\/wp-json\/wp\/v2\/media?parent=1365"}],"wp:term":[{"taxonomy":"rechtsgebiet-kategorie","embeddable":true,"href":"https:\/\/moor-law.ch\/en\/wp-json\/wp\/v2\/rechtsgebiet-kategorie?post=1365"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}