Ordinance on the E-Login System - Central Electronic Access (E-Login)

1. The State Chancellery operates the central electronic access to e-government services pursuant to [Art. 6a](https://www.gesetzessammlung.sg.ch/data/142.3/en/art6a) paras. 1 and 2 of the Act on E-Government dated 20 November 2018[[3]](#paragraphtext_content_fn_534764_2_3_c) (hereinafter E-Login).

2. The E-Login consists of

| | | | |

| --- | --- | --- | --- |

| a) | the authentication service of the Swiss authorities (AGOV); | | |

| | | | |

| --- | --- | --- | --- |

| b) | a section for the management of user data; | | |

| | | | |

| --- | --- | --- | --- |

| c) | a section for setting up representations. | | |

3. The State Chancellery takes appropriate measures to ensure data protection and information security.

1. **AGOV and the Area for User Data Management are Strategic E-Government Services According to Art. 24 Para. 1 Letter c E-GovG.** They are regarded as a common standard for the canton, political municipalities, and school municipalities.

2. **The Cooperation Committee May Grant Exceptions Upon Request** by the government, a political municipality, a school municipality, or the Association of St. Gallen Municipality Presidencies, particularly in cases of disproportionate financial or technical effort. This is conditional upon ensuring that an appropriate prior electronic authentication according to Art. 6a Para. 1 E-GovG is provided otherwise.

1. Any person utilizing an e-government service shall authenticate themselves in advance via the e-login. [Art. 2](https://www.gesetzessammlung.sg.ch/data/142.31/de/art2) para. 2 of this ordinance remains reserved.

2. The public body responsible for an e-government service shall determine the necessary trust level according to [Art. 4](https://www.gesetzessammlung.sg.ch/data/142.31/de/art4) of this ordinance based on the determined protection requirements. Special statutory regulations remain reserved.

3. If electronic authentication is successful, the e-login provides the personal data recorded for the necessary trust level to the requested e-government service.

4. The public body responsible is charged with granting permissions and the necessary processing of personal data within the e-government service.

1. The E-Login distinguishes between four levels of assurance.

2. At Level of Assurance 1 (AGOVaq100), a person registers for the E-Login by confirming their email address and providing the additional required data. The following personal data are processed

a) Name and first name;

b) Date of birth;

c) Gender;

d) Nationality;

e) Email address;

f) Correspondence language.

3. For Level of Assurance 2 (AGOVaq200), in addition to Level 1, the person confirms their residential address through a postal verification code.

4. For Level of Assurance 3 (AGOVaq300), in addition to Level 1, the person verifies their identity by presenting a valid official identification. This is done in person at the counter or electronically via automated video verification.

5. For Level of Assurance 4 (AGOVaq400), in addition to Level 3, the person also provides their AHV insurance number.

1. A user can view, manage, and delete their own data as well as any data related to any possible representations set up for them via the E-Login.

2. They must enter the data truthfully, update it as necessary, and take all precautionary measures to ensure that no unauthorized third parties gain access to their E-Login.

3. If a user requests the deletion of their E-Login, it will be deleted, and the data will be destroyed within one month at the latest.

1. Through the E-Login, a natural person can authorize other natural persons as authorized users, provided that an e-government service allows such representation.

2. Through the E-Login, a natural person can set up an organization account and deputies for an organization, provided that an e-government service allows such representation.

1. For the establishment, the following are required

a) In the representation of natural persons, electronic authentication of at least trust level 3 is needed for both the person being represented and the authorized representative or the authorized user;

b) In the representation of organizations

1. Electronic authentication of at least trust level 3, and

2. Proof of authorization for representation by the authorized representative or the authorized user.

2. For the establishment of a representation for an organization, the following data are also disclosed, if available

a) Company or name;

b) Legal form;

c) Registered office;

d) Address;

e) Business Identification Number (UID);

f) Value Added Tax Number;

g) Telephone number.

3. In electronic authentication

a) Authorized representatives or users confirm their authorization for representation once;

b) They select their role in each case.

4. A user who is authorized to represent an organization can authorize additional natural persons to represent the organization.

1. The competent staff members of the State Chancellery may

a) carry out data processing in the E-Login on behalf of a user;

b) temporarily block an E-Login in case of suspected unauthorized use. They shall notify the affected user in advance;

c) delete an E-Login and destroy the data upon confirmation of unauthorized use or after five years of inactivity. They shall notify the affected user in advance.

1. The e-login records every electronic authentication as well as data processing in the management of user data or the establishment and management of representations.

2. The recorded data, including any possible backup copies, are retained for a maximum of one year and then destroyed.