235.1 DSGLPD

CH

Art. 7 Legge federale del 25 settembre 2020 sulla protezione dei dati (LPD) - Protezione dei dati personali sin dalla progettazione e per impostazione predefinita

LPD; Capitolo 2: Disposizioni generali

Apri la fonte ufficiale Atto completo (154 Articoli) Versione Markdown leggibile dalle macchine (.md)

Art. 7 LPD · Protezione dei dati personali sin dalla progettazione e per impostazione predefinita

Il titolare del trattamento è tenuto ad adottare i provvedimenti tecnici e organizzativi necessari affinché il trattamento dei dati personali sia conforme alle disposizioni sulla protezione dei dati, in particolare ai principi di cui all’articolo 6. Li adotta sin dalla progettazione.

I provvedimenti tecnici e organizzativi devono essere adeguati in particolare allo stato della tecnica, al tipo e all’entità del trattamento dei dati personali come pure ai rischi derivanti dal trattamento per la personalità o i diritti fondamentali delle persone interessate.

Il titolare del trattamento è tenuto a garantire, mediante appropriate impostazioni predefinite, che il trattamento di dati personali sia circoscritto al minimo indispensabile per lo scopo perseguito, salvo che la persona interessata disponga altrimenti.

← Art. 6 LPD Legge federale del 25 settembre 2020 sulla protezione dei dati (LPD) - Scopo Art. 7 LPD →

Decisioni giudiziarie che applicano questa disposizione (21)

EDÖB · Schlussbericht vom 3 (Art. 7 DSG)

Dating App Fined for Data Protection Violations

Cited as the basis for the principle of data security.

EDÖB · 20210804 Rapport fin (art. 7 LPD)

FDPIC v. SocialPass Data Protection Concerns

Cited as a general basis for data security requirements and as a justification for the need for appropriate security measures.

EDÖB · 20140407 schlussberi (Art. 7 Abs. 1 DSG)

FDPIC Follow-up Audit: Loyalty Program Data Protection Improvements

This provision is cited in relation to the security measures required for personal data.

EDÖB · 20081216 Informati (Art. 7 DSG)

Credit Information Service Found in Violation of Data Protection Laws

Cited in recommendations regarding the need for organizational measures to prevent unauthorized access and ensure data security.

EDÖB · 20060411 Biometris (Art. 7 DSG)

Biometric Season Ticket Data Collection Case

Cited as the basis for requiring adequate technical and organizational measures to secure personal data.

EDÖB · 20050523 Kundenbin (Art. 7 DSG)

FDPIC Audit of Coop Loyalty Program Reveals Data Protection Deficiencies

Cited in relation to security measures for data, including server room access and data communication encryption.

EDÖB · Kundenbindungsprogra (Art. 7 DSG)

Loyalty Program Data Protection Audit

Cited in relation to data security, specifically encrypted internet access.

EDÖB 2024-12-16 (Art. 7 DSG)

Credit Reporting Agency's Data Provision Practices

This provision on security measures was applied to require X to implement appropriate organizational and technical measures to protect creditworthiness data.

EDÖB · Schlussbericht 2023 (Art. 7 DSG)

COVID-19 Test Data Breach: Operator Liability and Notification Exemption

Cited as the basis for the requirement for adequate technical and organizational measures to protect personal data.

EDÖB · 20220617 Schlussbe (Art. 7 DSG)

Swisstransplant Data Security Breach

Used to establish the obligation for adequate technical and organizational measures to protect personal data, ensuring confidentiality, availability, and integrity.

EDÖB 2020-02-11 (Art. 7 Abs. 1 DSG)

Facial Data Acquisition and Processing Violations

Cited as a principle violated by the mass procurement and processing of facial data without consent.

A-4232/2015 (Art. 7 Abs. 1 DSG)

Unlawful Processing of Personality Profiles and Creditworthiness Data

Used to establish the obligation to implement appropriate security measures to prevent unauthorized processing of personal data.

A-4941/2014 (Art. 7 Abs. 1 DSG)

Mandatory Metadata Retention Upheld Against Privacy Challenge

This provision establishes the principle of data security, requiring data controllers to take appropriate technical and organizational measures to protect personal data, which is relevant to the data retention obligation.

EDÖB · 20150601 schlussberi (Art. 7 Abs. 1 DSG)

Financial Institution's "E-Cockpit" and "Bicicletta" Data Processing Practices

Applied in conjunction with VDSG to assess the adequacy of technical and organizational measures for data security in E-Cockpit and Bicicletta.

BVGE-2012-14 (Art. 7 Abs. 1 DSG)

Unsealed Pension Statements Violate Data Protection Laws

This provision mandates that personal data must be protected by appropriate technical and organizational measures against unauthorized processing, reflecting the principle of data security.