Take-Aways (AI)
  • The Fede­ral Coun­cil adopts the EU direc­ti­ve on data pro­tec­tion in cri­mi­nal pro­se­cu­ti­on and ins­tructs the FDJP to imple­ment it.
  • The direc­ti­ve streng­thens per­so­nal data pro­tec­tion, expands the obli­ga­ti­ons of data pro­ce­s­sing bodies and regu­la­tes data trans­fers to third countries.
  • Amend­ments to the Data Pro­tec­tion Act and other laws are neces­sa­ry for imple­men­ta­ti­on; con­sul­ta­ti­on expec­ted in the fall.

The Fede­ral Coun­cil deci­ded today August 31, 2016, to adopt the new EU Direc­ti­ve on Data Pro­tec­tion in the Field of Law Enforce­ment to adopt. It has also ins­truc­ted the FDJP to include the legis­la­ti­ve amend­ments requi­red for imple­men­ta­ti­on in the ongo­ing revi­si­on of the Data Pro­tec­tion Act. 

From the Media release:

The new EU Direc­ti­ve of 27 April 2016 regu­la­tes data pro­ce­s­sing in the con­text of law enforce­ment and poli­ce and judi­cial coope­ra­ti­on and repres­ents a fur­ther deve­lo­p­ment of the Schen­gen acquis. It streng­thens the pro­tec­tion of data sub­jects and extends the obli­ga­ti­ons of the bodies respon­si­ble for data pro­ce­s­sing. It also defi­nes the con­di­ti­ons for the trans­fer of per­so­nal data from a Schen­gen sta­te to a third coun­try. Fur­ther­mo­re, it regu­la­tes the task and com­pe­ten­ces of the super­vi­so­ry authority.

As an asso­cia­ted Schen­gen sta­te, Switz­er­land was invol­ved in draf­ting the new EU direc­ti­ve. In order to imple­ment this direc­ti­ve, the Data Pro­tec­tion Act (DPA) and other laws must be adapt­ed. The Fede­ral Coun­cil alre­a­dy deci­ded on April 1, 2015, to take the EU data pro­tec­tion reform into account in the cur­rent revi­si­on of the DPA. It is expec­ted to send the bill out for con­sul­ta­ti­on in the fall.