Quiz Entry - updated: 2026.07.14
What counts as "data processing" (Datenbearbeitung) under Swiss data protection law?
Any handling of personal data whatsoever, regardless of the means or methods used.
The legal definition is deliberately broad. Data processing includes any operation involving personal data. The five main categories are:
| Operation | German term | What it covers |
|---|---|---|
| Collecting | Beschaffen | Gathering and acquiring data. |
| Storing | Aufbewahren | Saving and archiving data. |
| Using | Verwenden | Utilizing and analyzing data. |
| Modifying | Umarbeiten | Changing and adapting data. |
| Disclosing | Bekanntgeben | Sharing and publishing data. |
Key insight: The law covers the entire lifecycle of personal data, from the first moment of collection to the final deletion. Even storing data you never look at counts as processing. Even deleting data is technically processing it.
This broad definition means that virtually any organization that touches personal data in any way is subject to data protection law. There's no loophole for "we just store it" or "we only pass it along."