Switzerland: FDPIC launches updated website and data breach portal
The Federal Data Protection and Information Commissioner ('FDPIC') announced, on 11 May 2023, the launch of an updated website in preparation for the revised Federal Act on Data Protection ('FADP'), which will come into effect on 1 September 2023. Alongside the website update, the FDPIC has introduced the 'DataBreach Portal', a platform designed for reporting security vulnerabilities.
In particular, the FDPIC noted that the updated website features dedicated sections with explanatory fact sheets outlining new principles, rights, and obligations under the revised FADP. Moreover, the FDPIC highlighted that the key topics covered in the updated website include the extended right to information and the duty to provide information. Furthermore, the FDPIC specified that frequently asked questions ('FAQs') have been compiled to address common queries from the public, ranging from concerns about video surveillance to the publication of photographs on social media platforms. Additionally, the FDPIC noted that while some functions will only be activated once the revised FADP takes effect, such as the submission of a code of conduct to the FDPIC, the website serves as a comprehensive resource for individuals and organisations seeking guidance on data protection practices.
In addition, the FDPIC clarified that under the 'DataBreach Portal', data controllers will be required to promptly report any data breaches to the FDPIC if they pose a high risk to the privacy or fundamental rights of data subjects. Therefore, the FDPIC noted that to facilitate efficient and secure reporting, an electronic reporting form will be made available through the portal. In anticipation of the revised FADP, the FDPIC stated that the reporting portal has already been launched, enabling data controllers to align their processes and familiarise themselves with the required procedures.