EU data protection – also an issue for Swiss companies?

Definitely! The scope of application of the GDPR also extends to Swiss companies if they offer products or services in the European Union and process the personal data of EU customers, as in the case of an online shop. Any Swiss company that monitors the behaviour of citizens in the EU – such as by analysing the data of website visitors – also falls within the scope of the GDPR. Global corporations with headquarters in Switzerland that also process the data of an EU subsidiary are also affected.

What are the key facts?

The basic concept of the GDPR is to create strict(er) rules for the processing of personal data and thus to provide individuals with more comprehensive data protection.

The Regulation includes six basic principles that describe the rights of individuals on the one hand, while specifying the duties of companies on the other.

• Data minimization (Restriction of data collection to what is absolutely necessary)
• Earmarking (processing of data only for the specified purposes)
• Legality (Individual must give consent, processing must be traceable)
• Right to correctness and deletion of data (individual can get data corrected/deleted)
• Accountability and transparency (company must be able to prove and document GDPR compliance; duty of notification in case of a data leak)
• Integrity and confidentiality (company must guarantee organizational and technical security with regard to the processing of personal data)

Violations can result in penalties of up to four percent of the global annual turnover or € 20 million – yet another reason for working in compliance with the GDPR.

Need help?

We will be happy to support you and your company in the implementation of the new EU data protection regulation. Our “GDPReady Package” includes a comprehensive analysis workshop, a review of the current level of compliance, and the implementation of any measures needed. We also create a tool kit for you, so you will have several different tools at your fingertips to help you work in compliance with the GDPR.

Do you want to be ready when the GDPR comes into force on May 25, 2018? And do you want us to accompany you along the way? Simone Burgener will be happy to help you with any questions you may have.

You can also find further information here.