Ordinance
on Data Protection
(Data Protection Ordinance, DPO)

The con­trol­ler and the pro­cessor must take tech­nic­al and or­gan­isa­tion­al meas­ures in or­der to en­sure, de­pend­ing on the level of pro­tec­tion re­quired, that the data be­ing pro­cessed:

a.

are only ac­cess­ible to au­thor­ised per­sons (con­fid­en­ti­al­ity);

b.

are avail­able when they are re­quired (avail­ab­il­ity);

c.

are not altered without au­thor­isa­tion or un­in­ten­tion­ally (in­teg­rity);

d.

are pro­cessed in a trace­able man­ner (trace­ab­il­ity).