Recommendations for actions to ensure compliance of business processes with current data protection regulations at the vocational training center at F. Hoffmann-La Roche AG
Over the last years, digitalization of services and enterprises has resulted in an increase in the collection of personal data concerning both clients and employees. This data holds significant importance for numerous organizational operations. However, concerns arise due to its sensitive nature.
David Gauhl, 2023
Bachelor Thesis, F. Hoffmann-La Roche AG
Betreuende Dozierende: Stephan Jüngling
Keywords: Process Analysis, Prozess Analyse, GDPR, FADP, Data Protection, Data Privacy
Governments across the world, including the European Union through the implementation of the GDPR and the Swiss government through the revision of the FADP, have imposed more stringent regulations on data privacy. These rules highlight the need for openness, data access rights for individuals, and organizational accountability. Despite their already implemented compliance measures, the vocational training center at F. Hoffmann-La Roche in Kaiseraugst is determined to ensure full compliance with these regulations.
This bachelor thesis conducted a verification of their business processes in regards to the GDPR and revised federal act on data protection (nFADP). To achieve this, the mentioned current external regulations, as well as internal guidelines of Roche were examined. Furthermore, relevant business processes were analyzed and visualized in corresponding business process models. The information for this analysis was acquired through interviews with the actors of the processes.
Based on the findings of this analysis, the thesis provides specific recommendations for actions. The findings propose adaptations to the documentation of relevant processes to reinforce compliance with the GDPR and nFADP. Additionally, two SOPs were created to complement the existing internal guidelines.
Studiengang: Business Information Technology (Bachelor)
Fachbereich der Arbeit: