Employees of Swissmedic have online access to the information systems to the extent necessary for them to perform their tasks.
Access to the information systems shall be logged. Such logs shall be kept for no longer than two years and separate from the system in which the personal data is processed.22