Ordinance
on Data Protection
(Data Protection Ordinance, DPO)

¹ Bind­ing cor­por­ate rules in ac­cord­ance with Art­icle 16 para­graph 2 let­ter e FADP ap­ply to all un­der­tak­ings that be­long to the same group of un­der­tak­ings.

² They shall in­clude as a min­im­um the points men­tioned in Art­icle 9 para­graph 1 as well as the fol­low­ing in­form­a­tion:

a.

de­tails of the or­gan­isa­tion­al struc­ture and the con­tact de­tails for the group of un­der­tak­ings and its mem­bers;

b.

de­tails of the meas­ures taken with­in the group of un­der­tak­ings to com­ply with the bind­ing cor­por­ate rules.

³ The FD­PIC shall give no­tice of the res­ult of its as­sess­ment of the bind­ing cor­por­ate rules that it has been sub­mit­ted with­in 90 days.