Data Protection Ordinance (DPO)
English is not an official language of the Swiss Confederation. This translation is provided for information purposes only and has no legal force.
Art. 23 Data protection officer
The controller must grant the data protection officer: a. access to the required resources; b. access to all information, documents, records of processing activities and personal data that the officer requires to fulfil his or her tasks; c. the right to notify the highest management or governing body in important cases.
Art. 24 Exemption from the obligation to keep a record of processing activities
Undertakings and other private organisations employing fewer than 250 employees on 1 January of any year and natural persons are exempt from the obligation to keep a record of processing activities unless any one of the following requirements is met: a. a large volume of sensitive personal data is being processed; b. high-risk profiling is being carried out.
