What penalties can one expect if an employee of a daily allowance insurance sends documents including sensitive data to the wrong person?
March 14, 2025
Criminal law
As an employee of a daily allowance insurance, sending sensitive data to the wrong person can lead to various legal consequences.
First, the employee has the duty to perform the entrusted work carefully and to safeguard the legitimate interests of the employer in good faith (Art. 321a Abs. 1 OR). This also includes the duty of confidentiality and the protection of trade secrets, even after the termination of the employment relationship (Art. 321a Abs. 4 OR).
The unauthorized disclosure of sensitive data constitutes a violation of professional secrecy, which is punishable under Art. 321 StGB. Clergy, lawyers, defense attorneys, and other professions that are obligated to confidentiality may be punished upon request with imprisonment of up to three years or a fine (Art. 321 Abs. 1 StGB).
Moreover, it depends on whether the act was committed intentionally or negligently. The negligent violation of professional secrecy is also punishable if the necessary caution has not been observed (Art. 12 Abs. 3 StGB).
In addition to criminal consequences, civil liability for the damage caused may also be considered. The employee is responsible for any damage he or she intentionally or negligently causes to the employer (Art. 321e Abs. 1 OR).
Additionally, there are also obligations regarding the reporting of a data security breach. The report must include the nature of the breach, the time and duration, the categories and number of affected personal data and individuals, as well as the measures taken (Art. 15 Abs. 1 DSV).
In a case where an employee repeatedly violated professional secrecy, the court recognized a punishment of 180 days with a fine of 60 CHF per day, showing that significant penalties can also be imposed (6B_357/2022).
In summary, the employee faces both criminal and civil consequences, including possible imprisonment or fines, as well as liability for the damage caused. This depends on the exact circumstances and the employee's fault.
Sources