Making sure your data protection is aligned with business success
As a company you’ll have to adapt your processes, guidelines and organisational structure. At the same time you’ll need to navigate the regulatory jungle to avoid sanctions. If you fail to comply, you’ll face significant financial and reputational damage.
It helps to have data protection experts at your side. With our experience and expertise in data protection, we at PwC are the preferred partner for compliance. We offer industry-leading services to help you comply with either the GDPR or the Swiss FADP and its successor, the revised FADP. With our ongoing, coordinated support, complex regulation becomes simple. Choose us if you want to align your data protection with business success.
Data protection laws require the ability to identify, control and react to data protection risks, including clearly defined data protection roles and responsibilities. We’ll develop a data protection management system that enables you to govern your organisation.
These days your board expects to know whether your data protection management system is robust enough and whether the staffing is appropriate. The aim is to understand the risk exposure and maturity vis-à-vis the market.
A significant component of global data protection laws is the need to conduct DPIAs to help identify and minimise data protection risks which a new process, technology, system or device might have on an individual.
The transparency principle requires controllers to inform individuals about how they collect, use, store, transfer and secure personal data through a website privacy notice at the time the data is collected.
When it comes to important or critical processing operations, smart companies want to know whether they comply with applicable data protection laws, and especially whether the processing is lawful.
Under the data protection laws, personal data must be deleted if it’s no longer required. But data may also be subject to retention obligations.
Companies must make sure that their numerous contracts with third parties processing data for them are legally compliant.
Many data privacy laws place restrictions on transfers of personal data outside their country of jurisdiction, for example when you’re introducing cloud services like Office365, Successfactors or Workday. We help you design the architecture from a legal standpoint and recommend the safeguards you have to put in place.
The ability to notify and forensically investigate a breach is critical to protecting data. Data breaches may have to be reported within a specified time frame.
Data protection laws require that staff must be trained to ensure that they know about what’s expected from them in terms of data protection compliance. Awareness is also awareness.
Many privacy laws give data subjects a number of rights to which organisations are obliged to respond. It’s essential for an organisation to be able to facilitate such requests.
Data is the “new oil”. Every organisation should have adequate technical controls to safeguard their most precious asset.
https://pages.pwc.ch/core-contact-page?form_id=7014L000000kkHMQAY&embed=true
Philipp Rosenauer
Adrien Tharin
Attorney-at-law, Co-Head of FinTech, Blockchain and Digital Assets, Legal, PwC Switzerland
+41 58 792 92 24
Lorena Rota
