How to make data feel comfortable with the new data protection law
Since September 1, 2023, new uniform rules for handling personal data have been in force in Switzerland. For many companies it is an obligation, but for AAC Infotray AG it is a bonus.
Since November 2023, AAC Infotray AG has held ISO 27001:2022 certification including the controls for cloud services ISO/IEC 27017:2015. For this project, the company’s own QM software Limsophy BPM was expanded to include some very helpful modules in order to optimally map the requirements of the new data protection law and information security.
All non-monetary values are managed within the asset module. The processing directory required by the new data protection law can be created from the recorded assets and automatically stored as a versioned document. In the module Risk management, the risks relating to the assets are recorded and assessed according to their probability of occurrence and impact. Other features such as trainings or supplier evaluations are also managed intelligently and contribute to the optimal management of data protection and information security.
The journal MQ Management und Qualität has published a full report on the topic, which you can read here (only German).