Data Protection Ordinance (DPO)

By Steph3
12345678910111213141516171819202122
In The Matter OfData Protection Ordinance (DPO)
Exhibit A
Scroll to open

English is not an official language of the Swiss Confederation. This translation is provided for information purposes only and has no legal force.

Art. 23 Data protection officer

The controller must grant the data protection officer: a. access to the required resources; b. access to all information, documents, records of processing activities and personal data that the officer requires to fulfil his or her tasks; c. the right to notify the highest management or governing body in important cases.

Art. 24 Exemption from the obligation to keep a record of processing activities

Undertakings and other private organisations employing fewer than 250 employees on 1 January of any year and natural persons are exempt from the obligation to keep a record of processing activities unless any one of the following requirements is met: a. a large volume of sensitive personal data is being processed; b. high-risk profiling is being carried out.