In this section, you will learn about the data protection and security requirements that apply to workations or temporary remote work from abroad – and how companies can ensure their information security even outside Switzerland. Different countries have their own approaches to data protection and data security. Employees abroad must therefore comply with the provisions of the Swiss Data Protection Act, the EU GDPR, and, where applicable, local regulations.

According to the revised Swiss Data Protection Act, the employer remains responsible for the security of the data entrusted to them in all cases. This includes a sufficiently secure technical infrastructure, clear access rules, secure devices, and a mandatory protected VPN for sensitive data. Employees must also ensure that confidential information cannot be viewed or intercepted in unsuitable environments, such as public spaces or co-working spaces.

This session provides practical examples of how cross-border data processing is carried out correctly, how companies can set up secure access for employees abroad, and how typical mistakes can be avoided. As long as data remains stored in Switzerland and access from abroad is via secure connections, there is usually no cross-border data transfer. The EU GDPR becomes relevant when data from individuals located in the EU is processed.

At the end, you will receive specific recommendations on how employees can behave safely abroad – for example, when using foreign networks or working in public spaces.

The aim is to provide a compact overview of how remote work abroad can be organized in a data protection-compliant and secure manner without unnecessarily complicating everyday work.