2. decrees of international organisations that are binding on Switzerland and international treaties containing legal rules that are approved by the Federal Assembly;
1 Personal data must be protected against unauthorised processing through adequate technical and organisational measures.
1 In order to improve data protection and data security, the manufacturers of data processing systems or programs as well as private persons or federal bodies that process personal data may submit their systems, procedures and organisation for evaluation by recognised independent certification organisations.
b. the fulfilment of a task requires significant organisational or technical measures, the effectiveness of which must first be tested, in particular in the case of cooperation between federal and the cantonal bodies; or