The FDPIC has published guidelines on reporting data security breaches. In its very first article, the Data Protection Act (FADP) states that its aim is to protect the personality and fundamental rights of natural persons whose data is processed. Article 24 FADP governs the obligations of data controllers and the rights of data subjects in the event of a breach of data security when personal data are processed. Under Article 5 letter h FADP, a data security breach is to…
Read moreSWISS SUPERVISORY AUTHORITY: Completion of an informal preliminary enquiry due to indications of data protection violations
In November 2023, the software company Concevis was the victim of a hacker attack. Their clients included the Federal Statistical Office (FSO). Both the FSO and Concevis informed the FDPIC about the incident, as there were indications that FSO data may have fallen into the hands of unauthorised persons. The FDPIC subsequently opened an informal preliminary enquiry against the FSO and Concevis and informed the public with a short news report. The FDPIC’s investigations have now revealed that it is…
Read moreSWISS SUPERVISORY AUTHORITY: Concluding Statement on Data Scraping
Global data protection authorities issue follow-up joint statement on data scraping after industry engagement. The Federal Data Protection and Information Commissioner (FDPIC) and several global counterparts are highlighting how social media companies can better protect personal information, as concerns grow about mass scraping of personal information within social media platforms, including to support artificial intelligence systems. The FDPIC and his counterparts from 16 other global data protection authorities engaged with some of the world’s largest social media companies after issuing…
Read moreSWISS SUPERVISORY AUTHORITY: Meta: No change to the terms of use for Switzerland for the time being
Meta will not use the data of Facebook and Instagram users in Switzerland to train its AI either. The US company had originally announced that the data of adult users could be used for AI training from 26 June 2024. The US company expressly confirms to the Federal Data Protection and Information Commissioner that the data of users in Switzerland will not be used to train AI. The FDPIC had asked Meta to do so in writing on 17 June…
Read more