Vous êtes sur la page 1sur 15

1815

PRÉPOSÉ CANTONAL VALAIS À LA PROTECTION DES DONNÉES ET À LA TRANSPARENCE
DATENSCHUTZ - UND ÖFFENTLICHKEITSBEAUFTRAGTER DES KANTONS WALLIS

SATURDAY,  18th  April  2015

DATA  PRIVACY  OFFICER:  ADVISER,  AUDITOR  OR  ENFORCER?  
Sébastien  Fanti  |  Avocat  et  Notaire  |  Préposé  à  la  protection  des  données  et  à  la  transparence  |  sebastien.fanti@admin.vs.ch

twitter.com/preposeVS | facebook.com/preposeVS
Grand - Pont 4 | CH - 1950 Sion | Téléphone 027 322 94 49 | Télécopie 027 322 15 70 |
www.vs.ch | www.datenschutz-vs.ch | www.protectiondesdonnees-vs.ch | www.vs.ch/protectiondesdonnees | www.vs.ch/datenschutz

protectiondesdonnees-vs.ch | www.ch/protectiondesdonnees | www.com/preposeVS Grand .  18th  APRIL  2015  |  PROSPECTIVES  EN  MATIERE  DE  PROTECTION  DES  DONNEES  ET  DE  TRANSPARENCE Summary • • • • • • • Who’s who The Swiss Data Protection Organization The Role of the Data Protection and Information Commissioner The Role of the Data Protection and Information Commissioner in the Canton du Valais The future of Privacy and Transparency in Switzerland Conclusions Q&A twitter.com/preposeVS | facebook.Pont 4 | CH .ch | www.vs.ch | www.vs.UND ÖFFENTLICHKEITSBEAUFTRAGTER DES KANTONS WALLIS SATURDAY.vs.1815 PRÉPOSÉ CANTONAL VALAIS À LA PROTECTION DES DONNÉES ET À LA TRANSPARENCE DATENSCHUTZ .datenschutz-vs.1950 Sion | Téléphone 027 322 94 49 | Télécopie 027 322 15 70 | www.ch/datenschutz .

ch | www.vs.ch/protectiondesdonnees | www.ch/datenschutz .com/preposeVS | facebook.com/preposeVS Grand .vs.ch | www.UND ÖFFENTLICHKEITSBEAUFTRAGTER DES KANTONS WALLIS Who’s  who Sébastien Fanti • • • • • • Attorney at law Public Notary Security Management Lead Implementer ISO 27001:2013 Information Security Lead Auditor ISO:27001:2013 Certified Lead Privacy Implementer ISO 29100:2011 Certified DPO for Enterprises Elected by The Parliament as Data Protection and Information Commissioner for the Canton du Valais for the period 2015-2019 (part-time job 10%) Founder and Member of Lexing Network with a Law Firm in Switzerland (90%) twitter.1815 PRÉPOSÉ CANTONAL VALAIS À LA PROTECTION DES DONNÉES ET À LA TRANSPARENCE DATENSCHUTZ .ch | www.protectiondesdonnees-vs.Pont 4 | CH .vs.1950 Sion | Téléphone 027 322 94 49 | Télécopie 027 322 15 70 | www.datenschutz-vs.

com/preposeVS Grand . including entreprises. e.1815 PRÉPOSÉ CANTONAL VALAIS À LA PROTECTION DES DONNÉES ET À LA TRANSPARENCE DATENSCHUTZ .datenschutz-vs. the supervision is up to the cantonal and communal data protection commissioners. g.ch | www.Pont 4 | CH .protectiondesdonnees-vs. Data protection and Information Commissioner (in other cantons one person is Information Commissioner and another one is Data Protection Commissioner.vs.ch | www.1950 Sion | Téléphone 027 322 94 49 | Télécopie 027 322 15 70 | www.ch | www. The legal rules and competences in the cantons and communes can be different! in Valais.ch/protectiondesdonnees | www. As for data processing by cantonal or communal authorities is concerned.vs.ch/datenschutz .vs.UND ÖFFENTLICHKEITSBEAUFTRAGTER DES KANTONS WALLIS The  Swiss  Data  Protection  Organization Source FDPIC website The Federal Data Protection and Information Commissioner (FDPIC) is the competent authority for data processing by federal bodies and private persons.com/preposeVS | facebook. Fribourg) twitter.

datenschutz-vs.UND ÖFFENTLICHKEITSBEAUFTRAGTER DES KANTONS WALLIS Source FDPIC website The  Role  of  the  Federal  Data  Protection  and  Information  Commissioner The Federal Data Protection and Information Commissioner has in particular the following tasks in the field of data protection: - he supervises federal bodies he supervises private bodies he advises private bodies he assists federal and cantonal authorities in the field of data protection he gives his opinion on draft Federal legislation he cooperates with data protection authorities in Switzerland and abroad he informs the public about his findings and recommendations he maintains and publishes the Register for Data Files twitter.vs.protectiondesdonnees-vs.ch/datenschutz .vs.ch | www.vs.ch | www.ch | www.com/preposeVS Grand .1815 PRÉPOSÉ CANTONAL VALAIS À LA PROTECTION DES DONNÉES ET À LA TRANSPARENCE DATENSCHUTZ .ch/protectiondesdonnees | www.com/preposeVS | facebook.1950 Sion | Téléphone 027 322 94 49 | Télécopie 027 322 15 70 | www.Pont 4 | CH .

1950 Sion | Téléphone 027 322 94 49 | Télécopie 027 322 15 70 | www.datenschutz-vs.vs.protectiondesdonnees-vs.ch | www. In the private sector. He also gives advice on questions concerning legal problems or technical aspects of data security. Based upon these investigations. he can issue recommandations. he explains and comments the legal provisions about Data Protection.ch | www.com/preposeVS Grand .ch/datenschutz . offers his advice for the registration of data files.ch | www. for the registration of transborder dataflows.Pont 4 | CH . the Commissioner can investigate facts on his own initiative or at request of a third party. and for requests about of the right of access.vs.UND ÖFFENTLICHKEITSBEAUFTRAGTER DES KANTONS WALLIS Source FDPIC website The  Role  of  the  Federal  Data  Protection  and  Information  Commissioner For the accomplishment of his tasks. twitter.1815 PRÉPOSÉ CANTONAL VALAIS À LA PROTECTION DES DONNÉES ET À LA TRANSPARENCE DATENSCHUTZ . the Commissioner has mainly a consultative function.ch/protectiondesdonnees | www.com/preposeVS | facebook. he tries to find solutions.vs. In conflictual situations between private bodies or between private persons and federal bodies. Particulary.

com/preposeVS | facebook.1815 PRÉPOSÉ CANTONAL VALAIS À LA PROTECTION DES DONNÉES ET À LA TRANSPARENCE DATENSCHUTZ .vs.datenschutz-vs.ch | www.vs.ch | www.1950 Sion | Téléphone 027 322 94 49 | Télécopie 027 322 15 70 | www.com/preposeVS Grand .UND ÖFFENTLICHKEITSBEAUFTRAGTER DES KANTONS WALLIS Source FDPIC website The  Role  of  the  Federal  Data  Protection  and  Information  Commissioner Principle of transparency (freedom of information) The principle of transparency in the federal administration is enshrined in a federal law.ch/datenschutz . the Federal Data Protection and Information Commissioner has been assigned a number of functions: • he informs and advises private citizens on how to gain access to official documents • he advises the various administrative authorities and federal departments on the implementation of the Transparency Act • he acts as mediator in the event of a disagreement • he sends written recommendations to the persons concerned • he gives an opinion on draft legal texts prepared by the federal authorities that have an impact on the principle of transparency twitter.protectiondesdonnees-vs.Pont 4 | CH . Accordingly.ch/protectiondesdonnees | www.vs.ch | www.

| | | | | | | | | . the FDPIC verifies the implementation. If an authority restricts. Right of access may be limited if the document may compromise an overriding public or private interest. Any individual may ask to see the documents in question without having to provide any reason for doing so. the authority must justify its decision.UND ÖFFENTLICHKEITSBEAUFTRAGTER DES KANTONS WALLIS 1815 Source FDPIC website The  Role  of  the  Federal  Data  Protection  and  Information  Commissioner The principle of transparency establishes an enforceable right of access to the official documents of the federal administrations and the parliamentary services.ch/protectiondesdonnees www. The law applies to all official documents that have been produced since 1 July 2006. The purpose of such a procedure is to permit a rapid agreement between the parties. and submitswww.com/preposeVS Grand Pont 4 CH 1950 Sion Téléphone 027 322 94 49 Télécopie 027 322 15 70 www. Should this fail.datenschutz-vs.PRÉPOSÉ CANTONAL VALAIS À LA PROTECTION DES DONNÉES ET À LA TRANSPARENCE DATENSCHUTZ .protectiondesdonnees-vs. the FDPIC may set out his conclusions in a recommendation.ch www.vs. Furthermore. the FDPIC may at the request of the petitioner initiate an arbitration procedure.ch a report to the Federal Councilwww.vs. postpones or refuses access to a document. effectiveness and cost of the Transparency facebook.com/preposeVS twitter.ch/datenschutz on a regular basis.ch Act. If access is refused.vs.

com/preposeVS | facebook. try to find solutions draft cantonal legislation informs and advises private citizens on how to gain access to official documents various tasks.ch/datenschutz .vs.protectiondesdonnees-vs. central role and no real sanctioning power! twitter.ch | www. give advice in questions concerning legal problems or technical aspects of data security.ch/protectiondesdonnees | www.ch | www.1950 Sion | Téléphone 027 322 94 49 | Télécopie 027 322 15 70 | www. in conflictual situations between private persons and cantonal / communal bodies.ch | www.Pont 4 | CH .vs.com/preposeVS Grand .UND ÖFFENTLICHKEITSBEAUFTRAGTER DES KANTONS WALLIS The  Role  of  the  Data  Protection  and  Information  Commissioner  in  the  Canton  of  Valais • • • • • • • • supervise cantonal / communal (city and local) bodies give assistance to cantonal / communal authorities in the field of data protection explain and comment the legal rules about Data Protection offer his advice for the registration of data files and for requests about of the right of access.vs.1815 PRÉPOSÉ CANTONAL VALAIS À LA PROTECTION DES DONNÉES ET À LA TRANSPARENCE DATENSCHUTZ .datenschutz-vs.

the Aarhus Convention Danaides' barrel: never stop learning… and working! Some solutions: • • • • improve international cooperation (same facts…) submit for advance authorisation all vectors of massive treatment of data replace the Commissioner by the Prosecutor with larger power ? e.protectiondesdonnees-vs.datenschutz-vs. California adopt industry standards as minimal guarantee and safeguards (ISO 27001. g. ISO 29100…) twitter.ch | www.1950 Sion | Téléphone 027 322 94 49 | Télécopie 027 322 15 70 | www.ch/protectiondesdonnees | www.ch | www.vs.vs.ch | www.com/preposeVS Grand .ch/datenschutz .com/preposeVS | facebook. g.Pont 4 | CH .vs.1815 PRÉPOSÉ CANTONAL VALAIS À LA PROTECTION DES DONNÉES ET À LA TRANSPARENCE DATENSCHUTZ .UND ÖFFENTLICHKEITSBEAUFTRAGTER DES KANTONS WALLIS The  Role  of  the  Data  Protection  and  Information  Commissioner  in  the  Canton  of  Valais A lot of intellectual challenges : e.

UND ÖFFENTLICHKEITSBEAUFTRAGTER DES KANTONS WALLIS Prevention campaign Christmas 2014 : Advent calendar with one advice per day and in the end an online quizz to test the degree of knowledge.1815 PRÉPOSÉ CANTONAL VALAIS À LA PROTECTION DES DONNÉES ET À LA TRANSPARENCE DATENSCHUTZ . .

vs. integrated as a normal/human employee. with no additional human help. The Professors can ask to use him to teach robotic.1950 Sion | Téléphone 027 322 94 49 | Télécopie 027 322 15 70 | www. twitter.ch/datenschutz .ch | www.datenschutz-vs.com/preposeVS Grand .ch/protectiondesdonnees | www.ch | www.1815 PRÉPOSÉ CANTONAL VALAIS À LA PROTECTION DES DONNÉES ET À LA TRANSPARENCE DATENSCHUTZ . He would be able to teach by himself.protectiondesdonnees-vs.vs.UND ÖFFENTLICHKEITSBEAUFTRAGTER DES KANTONS WALLIS Robotic  prevention  campaign:     Noa Wallis will work with the Data Protection and Information Commissioner’s team.Pont 4 | CH . with no fees. They just need to share with CDPIC the result of programmation works.vs.ch | www.com/preposeVS | facebook. He will be in charge of prevention against the dangers of advanced technologies with a special program that will be taught in primary and secondary schools.

ch/datenschutz .be/9N-­‐a6wKI-­‐ow   Sextorsion = a form of sexual exploitation that employs non-physical forms of coercion by threatening to release sexual images or information to extort sexual favors from the victim. Don’t pay ! and call our emergency line : 0041 27 322 94 49 or use our emergency guide available on the website of the Data Protection and Information Commissioner: http://www.ch/protectiondesdonnees | www.com/preposeVS Grand .vs.ch | www.ch | www.Pont 4 | CH .vs.prepose-vs.ch | www.protectiondesdonnees-vs.vs.datenschutz-vs.1950 Sion | Téléphone 027 322 94 49 | Télécopie 027 322 15 70 | www.com/preposeVS | facebook.UND ÖFFENTLICHKEITSBEAUFTRAGTER DES KANTONS WALLIS Sextorsion:  http://youtu.1815 PRÉPOSÉ CANTONAL VALAIS À LA PROTECTION DES DONNÉES ET À LA TRANSPARENCE DATENSCHUTZ .ch/2015/01/09/activation-dunumero-durgence-en-cas-de-sextorsion/ twitter.

as the one contained in the new directive The democratic legislative process is really slow when it comes to adopt new rules.datenschutz-vs. if not later the swiss companies working in the EU have to comply already with the new EU rules and they will surely do it for the settlements in Switzerland! A major reform is absolutely necessary! twitter.vs. So we don’t expect an improved data privacy framework within the next 3 years.ch | www.1950 Sion | Téléphone 027 322 94 49 | Télécopie 027 322 15 70 | www.vs.com/preposeVS | facebook.ch | www.ch/protectiondesdonnees | www.com/preposeVS Grand .ch/datenschutz . Switzerland will follow the UE the trend and adopt similaire rules.protectiondesdonnees-vs.1815 PRÉPOSÉ CANTONAL VALAIS À LA PROTECTION DES DONNÉES ET À LA TRANSPARENCE DATENSCHUTZ .ch | www.vs.UND ÖFFENTLICHKEITSBEAUFTRAGTER DES KANTONS WALLIS The  future  of  Privacy  and  Transparency  in  Switzerland • • • • • The federal law of has to be reviewed and updated As a close partner.Pont 4 | CH .

ch | www.facebook.ch/datenschutz .protectiondesdonnees-vs.com/sebastienfanti Twitter: @preposeVS Facebook: https://www.vs.facebook.vs.vs.com/preposeVS Grand .ch | www.com/preposeVS | facebook.ch | www.1950 Sion | Téléphone 027 322 94 49 | Télécopie 027 322 15 70 | www.Pont 4 | CH .ch/protectiondesdonnees | www.UND ÖFFENTLICHKEITSBEAUFTRAGTER DES KANTONS WALLIS Thank you for your attention follow us on Twitter: @sebastienfanti Facebook: https://www.1815 PRÉPOSÉ CANTONAL VALAIS À LA PROTECTION DES DONNÉES ET À LA TRANSPARENCE DATENSCHUTZ .com/preposeVS twitter.datenschutz-vs.