On 25 May 2018, the Federal Data Protection Act aligning the data protection laws to EU General Data Protection Regulation and the Data Protection Directive with Respect to Law Enforcement entered into force. The Act establishes the data subject rights, such as the right to request correction and deletion and access data and the conditions under which the individual can request access. Furthermore, the Act establishes obligations regarding the collection and processing of sensitive personal data. Finally, the Act requires employers to obtain the employee's consent for processing their personal data.
Original source