Data security
Technical and organisational protection of personal data against unauthorised access, loss, alteration, disclosure or misuse.
Data security in Swiss data protection law concerns measures ensuring confidentiality, integrity and availability of personal data. Controllers and processors must choose technical and organisational measures appropriate to the risk, the nature of the data and the processing context. Examples include access controls, encryption, logging, backups, staff training and vendor oversight. Security is not limited to IT: contracts, governance and incident response matter. The required level is risk-based and must be reviewed as technology and threats evolve.