Article 8 Act on the Protection of Personal Data (Cantonal Data Protection Act, KDSG) - Consultation of the Appointed Data Protection Officer

1. If the data protection impact assessment reveals that the proposed processing still poses a high risk to the personality or fundamental rights of the affected person despite the measures envisaged by the responsible authority, it shall first obtain the opinion of the data protection officer.

2. The data protection officer shall inform the responsible authority of their objections to the proposed processing within two months. This period may be extended by one month if it concerns a complex data processing operation.

3. If the data protection officer raises objections to the proposed processing, they shall propose appropriate measures to the responsible authority.

← Article 7 Cantonal Data Protection Act, CDPA - Impact Assessment Act on the Protection of Personal Data (Cantonal Data Protection Act, KDSG) - Purpose Article 9 Cantonal Data Protection Act, CDPA - Disclosure of Personal Data: Principle →