SWISS. A weekly delta of changes to employee records will be sent to the Turas platform and will update the workforce database. There will be no flow in the other direction, so the Turas platform will simply maintain its data depending on changes in SWISS. These records will not be editable by any user, so will rely on updates to come from SWISS. Any employees not imported from SWISS will be added manually by the health board admins and will be editable. To allow placement boards to identify those training who should be terminated from placement boards payroll systems in July 2018, a report of trainee payroll numbers and NI numbers will be extracted from SWISS. The trainee payroll numbers data will be shared and combined with Turas People data to advise placement boards payroll teams of who should be terminated as of July 2018.
SWISS. In Switzerland the data protection law is mainly governed by the Federal Act on Data Protection (DSG) of 1992. In addition, further data protection statutes are also found at individual canton levels which are relevant to XxXxXx. In the Canton of Geneva the related law is the « Loi sur l'information du public, l'accès aux documents et la protection des données personnelles LIPAD RS A 2 08 ». According to art. 3.2 of LIPAD this law is applicable to all public and public law institutions (« a) les pouvoirs exécutif, législatif et judiciaire cantonaux, ainsi que leurs administrations et les commissions qui en dépendent; b) les communes, ainsi que leurs administrations et les commissions qui en dépendent; c) les établissements et corporations de droit public cantonaux et communaux, ainsi que leurs administrations et les commissions qui en dépendent; d) les groupements formés d’institutions visées aux lettres a à c ». Therefore the LIPAD is directly applicable for both the University of Geneva and VIVA. As the Cantonal law is similar to the federal law (the federal law directly influences the canton law’s interpretations) both sources will be mentioned. However, the legally binding provisions are those of the LIPAD for the Geneva Canton. According to art 12 DSG (art. 35 LIPAD), the institutions and persons holding and processing personal data must can disclose sensitive personal data or personality profiles to third parties only when a loi specifies clearly the work that needs to be accomplished or if the concerned person has given his consent (LIPAD 35.2 “avec le consentement explicite, libre et éclairé de la personne concernée”). In addition (LIPAD art 35.1) the processing of data can be legitimate if the processing is necessary for the fulfilment of their legal tasks. This part clearly covers the requirements and needs for the XxXxXx project. The collection of personal data is authorized by XXXXX (art. 38.1) as long as the collection is done in a way that is clearly recognizable by the concerned person. The transfer of personal data to other entities or persons is governed by LIPAD art. 39, where all cases and rules under which the data transfer can take place are described. XXXXX defines different rules for the transmission of personal data, depending on the receiving entity. It distinguishes the following entities that can receive personal data and defines the rules that govern the transfer:
