The management approach and its components Strategy, processes and tools The Swiss Federal Law on Data Protection, Banking Act and FINMA guidelines on operational risks in banks and bank client data constitute the definitive regulatory basis for data protection.