235.1
DSGLPD
CH
CH
Art. 7 Bundesgesetz vom 25. September 2020 über den Datenschutz (DSG) - Datenschutz durch Technik und datenschutzfreundliche Voreinstellungen
DSG; 2. Kapitel: Allgemeine Bestimmungen
Art. 7 DSG · Datenschutz durch Technik und datenschutzfreundliche Voreinstellungen
Der Verantwortliche ist verpflichtet, die Datenbearbeitung technisch und organisatorisch so auszugestalten, dass die Datenschutzvorschriften eingehalten werden, insbesondere die Grundsätze nach Artikel 6. Er berücksichtigt dies ab der Planung.
Die technischen und organisatorischen Massnahmen müssen insbesondere dem Stand der Technik, der Art und dem Umfang der Datenbearbeitung sowie dem Risiko, das die Bearbeitung für die Persönlichkeit oder die Grundrechte der betroffenen Personen mit sich bringt, angemessen sein.
Der Verantwortliche ist verpflichtet, mittels geeigneter Voreinstellungen sicherzustellen, dass die Bearbeitung der Personendaten auf das für den Verwendungszweck nötige Mindestmass beschränkt ist, soweit die betroffene Person nicht etwas anderes bestimmt.
Gerichtsentscheide zu dieser Bestimmung (21)
EDÖB · Schlussbericht vom 3 (Art. 7 DSG)
Dating App Fined for Data Protection Violations
Cited as the basis for the principle of data security.
EDÖB · 20210804 Rapport fin (art. 7 LPD)
FDPIC v. SocialPass Data Protection Concerns
Cited as a general basis for data security requirements and as a justification for the need for appropriate security measures.
EDÖB · 20140407 schlussberi (Art. 7 Abs. 1 DSG)
FDPIC Follow-up Audit: Loyalty Program Data Protection Improvements
This provision is cited in relation to the security measures required for personal data.
EDÖB · 20081216 Informati (Art. 7 DSG)
Credit Information Service Found in Violation of Data Protection Laws
Cited in recommendations regarding the need for organizational measures to prevent unauthorized access and ensure data security.
EDÖB · 20060411 Biometris (Art. 7 DSG)
Biometric Season Ticket Data Collection Case
Cited as the basis for requiring adequate technical and organizational measures to secure personal data.
EDÖB · 20050523 Kundenbin (Art. 7 DSG)
FDPIC Audit of Coop Loyalty Program Reveals Data Protection Deficiencies
Cited in relation to security measures for data, including server room access and data communication encryption.
EDÖB · Kundenbindungsprogra (Art. 7 DSG)
Loyalty Program Data Protection Audit
Cited in relation to data security, specifically encrypted internet access.
EDÖB 2024-12-16 (Art. 7 DSG)
Credit Reporting Agency's Data Provision Practices
This provision on security measures was applied to require X to implement appropriate organizational and technical measures to protect creditworthiness data.
EDÖB · Schlussbericht 2023 (Art. 7 DSG)
COVID-19 Test Data Breach: Operator Liability and Notification Exemption
Cited as the basis for the requirement for adequate technical and organizational measures to protect personal data.
EDÖB · 20220617 Schlussbe (Art. 7 DSG)
Swisstransplant Data Security Breach
Used to establish the obligation for adequate technical and organizational measures to protect personal data, ensuring confidentiality, availability, and integrity.
EDÖB 2020-02-11 (Art. 7 Abs. 1 DSG)
Facial Data Acquisition and Processing Violations
Cited as a principle violated by the mass procurement and processing of facial data without consent.
A-4232/2015 (Art. 7 Abs. 1 DSG)
Unlawful Processing of Personality Profiles and Creditworthiness Data
Used to establish the obligation to implement appropriate security measures to prevent unauthorized processing of personal data.
A-4941/2014 (Art. 7 Abs. 1 DSG)
Mandatory Metadata Retention Upheld Against Privacy Challenge
This provision establishes the principle of data security, requiring data controllers to take appropriate technical and organizational measures to protect personal data, which is relevant to the data retention obligation.
EDÖB · 20150601 schlussberi (Art. 7 Abs. 1 DSG)
Financial Institution's "E-Cockpit" and "Bicicletta" Data Processing Practices
Applied in conjunction with VDSG to assess the adequacy of technical and organizational measures for data security in E-Cockpit and Bicicletta.
BVGE-2012-14 (Art. 7 Abs. 1 DSG)
Unsealed Pension Statements Violate Data Protection Laws
This provision mandates that personal data must be protected by appropriate technical and organizational measures against unauthorized processing, reflecting the principle of data security.