Take-Aways (AI)
  • The Fede­ral Coun­cil reco­gnizes that the Fede­ral Data Pro­tec­tion Aut­ho­ri­ty (Edöb) is important, but rea­ches its limits when it comes to cross-bor­der, non-trans­pa­rent data processing.
  • Decis­i­ons on per­son­nel and finan­cial increa­ses will be cla­ri­fi­ed as part of the revi­si­on of the Data Pro­tec­tion Act and explai­ned in the dispatch.

Inter­pel­la­ti­on Aebi­scher of 29.02.2016 (16.3011): Adapt not only data pro­tec­tion law, but also resources

Sub­mit­ted text

The dis­cus­sions sur­roun­ding the appoint­ment of a new data pro­tec­tion com­mis­sio­ner have brought one thing abo­ve all to light: Swiss data pro­tec­tion is not whe­re it should be. In the­se times of Big Data, when data pro­tec­tion is up against exce­e­din­gly powerful, glo­bal­ly acti­ve com­pa­nies, the very sin­gu­lar of “data pro­tec­tion com­mis­sio­ner” rai­ses eye­brows. At the end of August, the Fede­ral Coun­cil plans to send the draft revi­si­on of the Data Pro­tec­tion Act out for con­sul­ta­ti­on. In order to pre­vent a legal basis from being crea­ted wit­hout pro­vi­ding the neces­sa­ry resour­ces, as was the case with the Fede­ral Act on the Prin­ci­ple of Public Access to Admi­ni­stra­ti­on, I would ask the Fede­ral Coun­cil to ans­wer the fol­lo­wing questions:

1. does he think that the cur­rent resour­ces for the data pro­tec­tion offi­cer are suf­fi­ci­ent to ensu­re com­pre­hen­si­ve data protection?

2. will the data pro­tec­tion offi­cer be able to hand­le the future tasks with his cur­rent team and the resour­ces provided?

3. will the resour­ces for the data pro­tec­tion offi­cer and his team be adju­sted in par­al­lel with the revi­si­on of the Data Pro­tec­tion Act?

State­ment of the Fede­ral Council

The Fede­ral Coun­cil is awa­re that Switz­er­land needs a fede­ral data pro­tec­tion aut­ho­ri­ty that is capa­ble of mee­ting the chal­lenges posed by the deve­lo­p­ment of the digi­tal society.

He ans­wers the interpellant’s que­sti­ons as follows:

1 The Fede­ral Coun­cil has taken note of the results of the eva­lua­ti­on of the Fede­ral Act on Data Pro­tec­tion (FADP; SR 235.1). The cor­re­spon­ding report shows that the Fede­ral Data Pro­tec­tion and Infor­ma­ti­on Com­mis­sio­ner (Edöb) ful­fills its legal man­da­te and achie­ves a high level of effec­ti­ve­ness. Howe­ver, the eva­lua­ti­on report also points out that Edöb is incre­a­sing­ly rea­ching its limits in the per­for­mance of its super­vi­so­ry func­tion due to the fact that data pro­ce­s­sing is being car­ri­ed out more and more fre­quent­ly and is incre­a­sing­ly non-trans­pa­rent and cross-bor­der. The que­sti­on of whe­ther the finan­cial and human resour­ces of the Edöb are suf­fi­ci­ent will be cla­ri­fi­ed in the con­text of the revi­si­on of the DPA.

2./3. As sta­ted in the respon­se to the Inter­pel­la­ti­on Der­der 15.4253 alre­a­dy explai­ned, the increa­se in Edöb’s resour­ces also depends on which new tasks are assi­gned to it. The Fede­ral Coun­cil can­not com­ment on the­se points at pre­sent. It will com­ment on them in the dis­patch on the revi­si­on of the FADP.