The Council of States has made Revision of the DPA the Continuation of the difference adjustment to the afternoon of June 2, 2020 agenda.
The following points are still open (Flag):
- Concept of genetic data;
- Profiling: Introduction of “high-risk profiling”;
- Duty to inform:
- Duty to inform about the “list of rights” and, if applicable, about the intention to process and disclose data to third parties for credit assessment;
- Exemption in case of disproportionate effort and in case of transfer to third parties (small group privilege);
- Access right:
- Requirements for the duty to provide information on automated individual decisions;
- Duty to provide information on processing for credit assessment;
- Exemption for disclosure to third parties (small group privilege);
- Justification:
- small group privilege when justified by economic competition;
- Credit assessment by credit reporting agencies: Exclusion of high-risk profiling; use of personal data of minors; maximum age of raw data (5 or 10 years);
- Fees: Fees for certain acts of the FDPIC;
- Buses: threat of fines for violation of minimum data security requirements;
- Subsidiary legislation: Differences in the areas of civil defense, customs, VAT, aviation, accident and military insurance (profiling with high risk in accident or military insurance?) and financial market supervision (profiling with high risk?).