Kanton Glarus

Subject

1 This Ordinance governs the operation and use of a cantonal data platform.

Jurisdiction

1 The Information Technology Department is responsible for ensuring the operation of the cantonal data platform.

Data Delivery to Data Platform

1 The residents' registration offices of the municipalities shall transmit the personal data (identifiers and characteristics) of every person recorded in their residents' register, in accordance with Article 6 of the Federal Act on the Harmonisation of Residents' Registers and other Official Registers of Persons (RHG), to the data platform.

2 They shall transmit any changes to the personal data in accordance with Article 6 RHG to the data platform on an ongoing and immediate basis.

3 The personal data to be delivered in electronic form must meet the same technical quality requirements as prescribed by the federal register harmonisation legislation for the delivery of the personal data listed in Article 6 RHG to the Federal Statistical Office.

Data Sovereignty

1 The sovereignty over the data supplied to the data platform remains with the

municipalities. Only they are entitled to change data and to provide information to third parties concerning the personal data entered into the data platform.

1)

GS I A/1/1

2)

GS I C/21/2

SBE 2014 42

1

I C/21/3

Access to Data Platform

1 The administrative bodies authorized to access the data platform, the subject

matter, and the modalities of the access authorization to the data platform are

specified in the annex.

2 Within the authorized administrative body, access to the data platform is

granted to persons entrusted with the fulfillment of the corresponding

administrative task. The head of the administrative body determines these

persons.

3 The following access authorizations are distinguished

a. Simple Query: Authorization for simple read-only access to current

personal data;

b. History: Authorization for access to no longer current personal data to

make processes traceable;

c. Export: Authorization for electronic data export;

d. Automated: Authorization for automatic retrieval of personal data via

interface with specialized applications.

Departure; Death

1 After a period of 3 years since the departure from the canton or the date of death, no further access to the personal data of those who have departed or passed away shall be granted.

### Control

1 Data accesses are logged.

2 The IT Department randomly checks recorded accesses for compliance with this Ordinance.

Responsibility

1 The IT Department ensures, from a technical perspective, that only the access authorizations determined in accordance with Article 5, paragraph 2 are available.

2 The head of the administrative unit authorized to retrieve data monitors the correct handling of the granted access rights.