Feasibility study on the traceability of the use of personal data
The administration processes personal data on a daily basis in order to provide its services. In the 2020-2023 eGovernment Strategy Switzerland, the "openness and transparency" principle states that the digitalisation of processes is an opportunity enabling interested parties to view their data electronically in the future and giving them options for managing and sharing it. As a first step, the groundwork is being laid for a solution for the traceability of the authorities' access to and use of personal data.
Digitalisation as an opportunity for transparency concerning personal data
Anyone who uses the internet leaves traces behind them: in search engines, on websites or in social media. It is often unclear what personal data is collected and for what purpose.
Administrations likewise collect and process personal data in their day-to-day activities as part of their statutory mandate. The 2020-2023 eGovernment Strategy Switzerland states that, in the future, personal data should be made available in such a way that those concerned can themselves view their data electronically, manage it where appropriate, and authorise or refuse its disclosure to third parties. This requires knowledge of which administrative unit accessed the data, when and why. The re-use of data must be proportionate and non-discriminatory.
eGovernment Switzerland had a feasibility study conducted through to the end of 2021, thereby providing an initial basis for ascertaining how a possible traceability solution for the use of personal data by administrative units could be achieved, or how authorities could gradually work towards such a solution.
Further information
The feasibility study is available for downloading here in German only.
Implementation plan objective 13/21
Preparing a feasibility study on the traceability of the use of personal data
«The aim is to create a basis for access tracking that records the use of personal data by administration staff or administrative units. A study should be conducted to determine which standards, interfaces, bus systems or other components need to be put in place for this purpose. It should also be clarified whether full access tracking is feasible or whether partial implementation should be the goal.»
Implementation plan measures
Measures | End date | ||
---|---|---|---|
Measures | Draw up specifications for the tender and conduct the procurement. | End date | Completed |
Measures | Conduct a feasibility study for a log system architecture that shows the public which personal data an authority has viewed or used. | End date | Completed |
Measures | Analyse the legal basis. | End date | Completed |