Data leak at vaccination platform: data protection officer opens proceedings

The Federal Data Protection and Information Commissioner (FDPIC) has opened formal proceedings against the operator of the www.meineimpfungen.ch platform. Previously, the online magazine "Republik" had uncovered possible data protection violations by the platform and filed a complaint. After the data protection commissioner was informed on March 21, 2021 by the online magazine about its clarifications regarding possible data protection violations of the vaccination platform www.meineimpfungen.ch, he summarily reviewed the allegations raised by the medium and the information available to him. After consultation with the National Cyber Security Center (NCSC), he has come to the conclusion that the reported violations are plausible.

Particularly sensitive personal data affected

On March 22, 2021, the FDPIC initiated and opened a clarification of the facts pursuant to Art. 29 of the Federal Data Protection Act (FADP) against the foundation meineimpfungen, which has its registered office in Gümligen, Bern. In addition, it has worked towards the immediate discontinuation of the processing that has been reported as inadequate. The data processing of the vaccination platform is likely to violate the personal rights of a large number of persons, especially since in this case it concerns personal data concerning health that is particularly worthy of protection.

Those responsible at the foundation are now called upon to comment very quickly to the commissioner on the accusations made and the complaint filed by "Republic". In addition, the commissioner expects information about any data losses.

Source: Federal Data Protection and Information Commissioner