In its meeting held on August 31, 2022, the Swiss Federal Council decided to enact the revised Data Protection Act (DPA) and the implementing provisions in the new Data Protection Ordinance (DPO) and the new Ordinance on Data Protection Certifications (VDSZ) to enter into force on September 1, 2023.
The European Data Protection Board (EDPB) Guidelines 01/2021 on Examples regarding Personal Data Breach Notification [Version 2.0] contain useful information regarding the assessment of the data breach notification obligation under article 33 GDPR and article 34 GDPR. Furthermore, these guidelines include a list of various exemplary scenarios and considerations as to whether or not there is an obligation to notify the competent supervisory authority (article 33 GDPR) and/or an obligation to inform the data subjects (article 34 GDPR) based on the assessment of the specific risks to the rights and freedoms of natural persons.
Following public consultation, the final version of the EDPB Guidelines on examples regarding data breach notifications is now available here: https://t.co/oXJBEQfrv1 pic.twitter.com/4PyqWlLxrd
— EDPB (@EU_EDPB) January 3, 2022