Governments across the world, including the European Union through the implementation of the GDPR and the Swiss government through the revision of the FADP, have imposed more stringent regulations on data privacy. These rules highlight the need for openness, data access rights for individuals, and organizational accountability. Despite their already implemented compliance measures, the vocational training center at F. Hoffmann-La Roche in Kaiseraugst is determined to ensure full compliance with these regulations.

This bachelor thesis conducted a verification of their business processes in regards to the GDPR and revised federal act on data protection (nFADP). To achieve this, the mentioned current external regulations, as well as internal guidelines of Roche were examined. Furthermore, relevant business processes were analyzed and visualized in corresponding business process models. The information for this analysis was acquired through interviews with the actors of the processes.

Based on the findings of this analysis, the thesis provides specific recommendations for actions. The findings propose adaptations to the documentation of relevant processes to reinforce compliance with the GDPR and nFADP. Additionally, two SOPs were created to complement the existing internal guidelines.