🇱🇮Data Protection Act (Datenschutzgesetz)

← Back to laws in Liechtenstein

Liechtenstein's current national data protection overlay

The DSG protects personality and fundamental rights and supplements the GDPR for public and private bodies. It also contains a separate law-enforcement-processing regime. The official LILEX consolidation used here is the version effective 1 April 2026.

Surveillance and governance

Article 5 permits surveillance of publicly accessible spaces only for specified public tasks, premises rights or concrete legitimate interests where data-subject interests do not prevail. Notice must identify the observation and controller, reuse is tightly limited, data must be deleted promptly when no longer needed, and recordable surveillance must be notified to the Datenschutzstelle before operation.

Articles 6-8 require public bodies to appoint an appropriately qualified and independent DPO, publish and notify contact details, provide resources and early involvement, and preserve confidentiality.

Sensitive data, research and confidentiality

Article 21 supplies national grounds for special-category processing and requires appropriate specific measures such as access restriction, logging, training, pseudonymisation, encryption, resilience and effectiveness testing. Article 26 imposes data secrecy unless disclosure has a lawful basis. Article 27 permits qualifying research and statistics processing with safeguards, limits rights only where necessary, requires anonymisation as soon as possible and separation of identifying features in the meantime.

Scoring, enforcement and liability

Article 31 restricts contractual scoring to demonstrably relevant data and a scientifically recognised mathematical-statistical method; address data cannot be the sole input and its intended use must be disclosed and documented. Articles 40-44 provide administrative fines, offences for unlawful acquisition and disclosure of secret data, and compensation rights.