235.11DPOFederal Council OrdinanceSep 1, 2023Original source
The responsible federal body and its processor must issue processing regulations for automated processing if they:
process sensitive personal data;
carry out profiling;
process personal data in accordance with Article 34 paragraph 2 letter c FADP;
allow cantons, foreign authorities, international organisations or private persons access to personal data;
link data collections with each other; or
operate an information system or manage data collections with other federal authorities.
The regulations must in particular include details of the internal organisational structure, data processing and control procedures, and the measures that guarantee data security.
The responsible federal body and its processor must update the regulations regularly and make them available to the data protection officer.
0 commentaries
No commentaries are available for this article yet.