Que­sti­on Schwa­ab (14.1064): Does bank­rupt­cy law need to be amen­ded with regard to com­pu­ter data?

Que­sti­on Schwa­ab (14.1064): Does bank­rupt­cy law need to be amen­ded with regard to com­pu­ter data?

Sub­mit­ted text

The owner­ship of com­pu­ter data is not regu­la­ted under Swiss law. If a hosting pro­vi­der goes bank­rupt, the com­pu­ter data it mana­ges falls into the bank­rupt­cy estate. Their owners can­not recla­im them becau­se, accor­ding to the estab­lished case law of the Fede­ral Supre­me Court, this is only pos­si­ble for tan­gi­ble goods in bank­rupt­cy pro­ce­e­dings. Given the growth that the cloud com­pu­ting indu­stry is expe­ri­en­cing in our coun­try, soo­ner or later the­re will be a bank­rupt­cy of a hosting pro­vi­der. It is cer­tain­ly in the inte­rest of this indu­stry that the sta­te has a duty to sup­port and ensu­re data secu­ri­ty even when hosting pro­vi­ders are in a dif­fi­cult eco­no­mic situation.

I the­r­e­fo­re ask the Fede­ral Coun­cil to ans­wer the fol­lo­wing questions:

1. does the Fede­ral Coun­cil con­sider it neces­sa­ry to amend Artic­le 242 of the Fede­ral Debt Coll­ec­tion and Bank­rupt­cy Act (or the other rele­vant pro­vi­si­ons) so that, in the event of the bank­rupt­cy of a hosting pro­vi­der, com­pu­ter data which is part of the bank­rupt­cy estate but which “belongs” to third par­ties can be clai­med by them?

2. does he agree that effec­ti­ve data pro­tec­tion is a com­pe­ti­ti­ve advan­ta­ge for the Swiss cloud com­pu­ting industry?

3. is it gene­ral­ly of the opi­ni­on that Swiss law satis­fac­to­ri­ly regu­la­tes the que­sti­on of “owner­ship” of com­pu­ter data?

4. if not, does it intend to give fur­ther con­side­ra­ti­on to reform on the “owner­ship” of data?

Ans­wer of the Fede­ral Coun­cil v. 12.12.2014

1 Under cur­rent law, the­re is no owner­ship of data under civil law. For this rea­son, segre­ga­ti­on in bank­rupt­cy based on Artic­le 242 of the Fede­ral Debt Coll­ec­tion and Bank­rupt­cy Act (SchKG, SR 281.1) is not pos­si­ble. If per­so­nal data is invol­ved, the data sub­ject is pro­tec­ted by the pro­vi­si­ons of the Fede­ral Act on Data Pro­tec­tion (Data Pro­tec­tion Act, DPA, SR 235.1). This law pro­tects the per­sons con­cer­ned against unlawful pro­ce­s­sing of their per­so­nal data. As part of the ongo­ing work with regard to a pos­si­ble revi­si­on of the Data Pro­tec­tion Act, the Fede­ral Depart­ment of Justi­ce and Poli­ce (FDJP) is exami­ning whe­ther the cur­rent level of pro­tec­tion under the Act is still sufficient.

Moreo­ver, the intro­duc­tion of a spe­cial rule for the case of bank­rupt­cy does not seem appro­pria­te: With the ope­ning of bank­rupt­cy pro­ce­e­dings against the ori­gi­nal owner of a data coll­ec­tion, the pos­si­bi­li­ty ari­ses that the owner­ship of the data is trans­fer­red to a third par­ty. Howe­ver, this can also hap­pen out­side of bank­rupt­cy pro­ce­e­dings, for exam­p­le on the occa­si­on of the sale of a busi­ness or the data coll­ec­tion, but also in the con­text of an inheritance.

2 The Fede­ral Coun­cil belie­ves that effec­ti­ve data pro­tec­tion, com­bi­ned with Switzerland’s repu­ta­ti­on as a relia­ble and sta­ble coun­try, can actual­ly give a com­pe­ti­ti­ve advan­ta­ge to Swiss com­pa­nies working in the field of the infor­ma­ti­on socie­ty. This is par­ti­cu­lar­ly true in the area of data sto­rage, whe­re trust is of para­mount importance.

3 / 4 On the occa­si­on of the cur­rent revi­si­on of the FADP, the que­sti­on is also being exami­ned whe­ther, in devia­ti­on from the cur­rent legal situa­ti­on, an actu­al “owner­ship of per­so­nal data” should be intro­du­ced. The FDJP will soon sub­mit pro­po­sals to the Fede­ral Coun­cil on how to pro­ce­ed. In con­trast, a broad reflec­tion on an owner­ship of data in gene­ral is not planned.

Aut­ho­ri­ty

Area

Topics

Rela­ted articles

Sub­scri­be