Why GeBüV compliance is a MUST for ECM/DMS/ERP providers in Switzerland

As a foreign product provider (ever even for CH manufacturers), it is not always clear why GeBüV(Business Records Ordinance) compliance is a MUST in Switzerland when it comes to storing records.

It would go too far to go into the history of the development, the individual contents and interpretations of the GeBüV here. As co-author of the GeBüV and author of the “critical” elements, it seems appropriate to me to make a few remarks on its significance in practice.

These are the 5 main reasons why your product must be GeBüV compliant in Switzerland:

  1. Although the GeBüV is a norm of commercial law, (Code of Obligations); almost all laws in Switzerland refer to it as a binding norm for the implementation of storage and archiving of data/documents (see RM Guide). Particularly noteworthy here is the FTA (Federal Tax Administration), which explicitly points out that receipts for input tax deduction must comply with the ElDI-V ((Ordinance of the Federal Department of Finance on Electronic Data and Information)) as well as the GeBüV.
  2. The GeBüV contents are used as the primary benchmark when assessing compliance and serve as a reference for legally compliant storage and archiving….
  3. The quality of evidence of electronic data is measured by its conformity with the GeBüV.
  4. The GeBüV contains clear specifications for technical implementation. This is in contrast to most foreign laws, which do not have such provisions.
  5. Many CH corporate officers (CEO, CFO, Legal) want an explicit compliance statement. Is your product GeBüV compatible?

As a rule, foreign reports do not address the detailed requirements of the GeBüV. For example, there are usually no statements on the separation of data stocks (management vs. storage) or on safeguarding the integrity when using changeable storage media.

We will be happy to advise you and check your products for conformity with Swiss laws.


Submit a Comment

Your email address will not be published. Required fields are marked *

Related articles

On 16.3. is Digital Cleanup Day

On 16.3. is Digital Cleanup Day

Tidying up is clearly not everyone's cup of tea, but we all know the good feeling that a tidy room, a tidy desk or ... a tidy drive! You can feel proud with a clear conscience, because deleting data also has an important effect on energy consumption. I have calculated...

read more
Dealing with data risks: Data breach notification

Dealing with data risks: Data breach notification

A data breach notification or "data breach notification" refers to the process by which an organization or company is required to notify the relevant data protection authorities and, if applicable, data subjects of a data breach that is likely to result in a high risk...

read more