Lucerne Councilor Questions 'Bontrebo' App's Data Protection
Councilor Adrian Hafliger of Lucerne has raised concerns about the data protection of the 'Bontrebo' app, used by the city's social services. He wants to know if a data protection impact assessment (DPIA) has been carried out for the app, which stores data on Microsoft Azure cloud despite using secure communication protocols.
The 'Bontrebo' app, developed by the Swiss company Bontrebo, is part of the 'Microsoft for Startups' program and uses Microsoft Azure cloud services. It enables direct and low-threshold communication between social workers and clients in Lucerne. However, the use of Microsoft 365 for such sensitive data has been criticized by the Lucerne data protection officer, Natascha Ofner-Venetz, in the past.
Councilor Hafliger argues that the app may handle particularly protected personal data, raising concerns about its compliance with data protection regulations. He has asked the city council to answer data protection-related questions about the app in an interpellation. The city is currently starting a preliminary project to develop a cyber strategy to regulate understanding, responsibilities, and handling of cyber risks and incidents.
The use of the 'Bontrebo' app in Lucerne's social services has sparked data protection concerns. Councilor Hafliger's interpellation seeks clarity on whether a DPIA has been completed and reviewed by the cantonal data protection officer. The city is addressing these issues while working on a cyber strategy project.
