Topics
Data protection in practice
What the Swiss FADP and the GDPR require in everyday operations – and how obligations become proven processes. For everyone who wants to put data protection into practice, not just document it.
Find and record
Know where personal data is stored, and turn that into a register with reliable retention periods.
- Find Finding personal data Where personal data is stored in file storage, databases and Microsoft 365 – and how to find it reliably. Read more
- Record Record of processing activities Who has to keep a record, what goes into it and how it stays up to date – under the FADP and the GDPR. Read more
- Delete Retention and deletion periods How long data must and may be retained in Switzerland – and how retention periods become deletion rules. Read more
Answering requests
Handle access and erasure requests on time and in full.
- Requests Data subject access requests Deadline, identity verification and content: answering data subject access requests in full under the FADP and the GDPR. Read more
- Requests Right to erasure When personal data must be deleted on request, which exceptions apply and how to prove the deletion. Read more
Delete and prove
From the data deletion concept to proven deletion in every system.
- Delete Data deletion concept under ISO/IEC 27555 Data types, deletion periods, deletion classes: how a data deletion concept is structured and how it takes effect. Read more
- Delete Deleting across many systems Orchestration, approval, objections: how to delete reliably in legacy IT landscapes. Read more
- Delete Deletion log and proof of deletion What a proof of deletion should contain and why a spreadsheet is not enough. Read more
AI and sharing
Control stored AI data and share data without exposing individuals.
- AI Microsoft Copilot and data protection Prompts, transcripts and shared storage: how organisations keep control of personal data with Copilot. Read more
- Share Pseudonymisation and anonymisation The difference, the legal consequences under the FADP and the GDPR, and when to use which method. Read more
- Share Test data without real personal data Realistic test data without real people – and sharing data for a defined purpose. Read more
Fundamentals
Legal bases, terminology and operations – the foundation for everything else.
- Fundamentals FADP and GDPR compared The operational obligations under the Swiss FADP and the GDPR side by side – with articles and deadlines. Read more
- Fundamentals Privacy Operations Data protection that takes action: find, record, respond, delete and prove. Read more
- Fundamentals Running data protection software yourself Why data protection software often needs to run in your own data centre or your own cloud. Read more
- Fundamentals Choosing data protection software What types there are, what matters when choosing and which questions you should ask every vendor. Read more
- Fundamentals Alternative to OneTrust When OneTrust fits and when an alternative does – a fair comparison with sources. Read more
Guide to download
Deletion you can prove
Seven steps from deletion concept to proven deletion – for organisations with many systems. 11 pages with checklist and legal basis, free and without registration.
Frequently asked questions
Who are these topics for?
For data protection officers, IT management, compliance and internal audit – for all organisations with data protection requirements, regardless of industry.
Does this also apply to companies in Germany and Austria?
Yes. Most pages cover the Swiss FADP and the GDPR side by side and cite the relevant articles.
Do these pages replace legal advice?
No. They provide a well-founded overview with sources. An assessment of an individual case requires a specialist.
See Espresso in 30 minutes
We will show you the cockpit with sample data – and discuss where you should start.
Request a demoor write directly to info@espressodataprivacy.com