itSMF Switzerland - Blog #ISO29134itSMF Switzerland - Blog #ISO29134https://www.itsmf.ch/blogs/tag/ISO29134Fri, 11 Sep 2026 04:26:31 +0200http://zoho.com/sites/<![CDATA[GRC and Data Protection: the GRC approch in EU and Swiss contexts]]>https://www.itsmf.ch/blogs/post/grc-and-data-protection-the-grc-approch-in-eu-and-swiss-contextsData protection between EU and Switzerland and the GRC Data Protection approach on GDPR and LPD-DSG-LPD (FDA): let's take a closer look at these laws together.]]>

Reading time: ~ 2 min.

Data protection between EU and Switzerland: the GRC Data Protection approach on GDPR and LPD-DSG-LPD (FDA)

GRC and Data Protection: what about the approach in Switzerland?
 
We already told you about the new Federal Data Protection Act (also known as LPD) that was enacted in Switzerland in our previous post. Today we are getting back on this topic considering one big challenge for the Swiss companies: the GRC and data protection between European Union and Switzerland.

Many organizations in Switzerland will face a double challenge. They have to manage compliance with the requirements of the LPD and, at the same time, with GDPR too. This one - as known - applies also to the EU citizens personal data processing carried out outside of the EU.

Many Swiss companies have to find a solution that could be suitable for both the contexts. 
How to manage compliance with the requirements of the LPD and the GDPR in an integrated way? 

The adoption of a common GRC approach (Governance, Risk Management, Compliance) based on the main ISO standards can be of great help. 
This can be the right choice with particular reference to the following standards:
  • Risk management according to ISO 31000
  • Privacy Impact Assesment on ISO 29134
  • Compliance management (ISO 37301)
  • Information security management system (ISO 27001)
  • Business continuity management system (ISO 22301)
  • IT Service Management System (ISO 20000-1).

Due to this high relevance for a lot of companies, we will have a special focus on topic with a dedicated class. 

ITSMF and MGS will have a partnership on the next class about GRC and Data protection between EU and Switzerland. 

We will held this class on 6th and 7th October: but you will get more info about during the next weeks.

Need to know more about it?

Click on one of the options below to enter in the itSMF Enviroment and for being updated the way which is best for you.

Subscribe the itSMF Newsletter
DISCOVER THE EVENT CALENDAR
Enter the itSMF Membership Program
]]>Wed, 04 Aug 2021 05:00:41 +0200<![CDATA[GRC and data protection in Switzerland: structure and main requirements of the LPD]]>https://www.itsmf.ch/blogs/post/grc-and-data-protection-in-switzerland-structure-and-main-requirements-of-the-lpdData protection in Switzerland is regulated by the Swiss Federal Data Protection Act (DPA): the new law will enter into force on September 2023.]]>

Reading time: ~ 2 min.

Data protection in Switzerland: the Swiss Federal Data Protection Act (DPA)

As is known, on September 25th, 2020, the Federal Data Protection Act (LPD) of Switzerland was enacted. 
The LPD - similarly to the GDPR - has a three levels structure: you can find on it chapters, sections and single articles. 
There are many clear correlations between the requirements of the Swiss LPD and the requirements of the European GDPR. These are:
  • The purpose and field of application.
  • The definition of personal data and processing.
  • The figures involved (data subject, data controller and data processor).
  • The applicable principles to the processing.
  • The rights of the data subject.
  • The privacy by design and by default.
  • The obligations of data controllers and processors.
  • The personal data protection.
  • The role of the data protection consultant.
  • The purpose and field of application.
  • The definition of personal data and processing.
  • The figures involved (data subject, data controller and data processor).
  • The applicable principles to the processing.
  • The rights of the data subject.
  • The privacy by design and by default.
  • The obligations of data controllers and processors.
  • The personal data protection.
  • The role of the data protection consultant.
How to manage the compliance with the requirements of the Swiss LPD? What is the right answer? Remember, every company has to pay attention to and comply with this act! 

The adoption of a GRC (Governance, Risk Management and Compliance) approach based on the main ISO standards can be particularly useful, so we will check it on our next blog posts.


We are going to see how it is possible to execute everything in the right way in the next weeks: so please stay tuned! 


Keep in mind also that we are going to take a deeper and closer look at this crucial topic on our next class by itSMF with the partnership of MGS. 


This class is going to be scheduled on 6th and 7th October. We will keep you in touch shortly with some details and of course the enrollment.

Need to know more about it?

Click on one of the options below to enter in the itSMF Enviroment and for being updated the way which is best for you.

Subscribe the itSMF Newsletter
DISCOVER THE EVENT CALENDAR
Enter the itSMF Membership Program
]]>Thu, 22 Jul 2021 05:00:08 +0200