|
Art. 349517
517 Repealed by Annex 1 No 5 of the FA of 13 June 2008 on the Federal Police Information System, with effect from 5 Dec. 2008 (AS 20084989; BBl 20065061).
|
Art. 349a518
1. Protection of personal data.
a. Legal basis
The competent federal authorities may only disclose personal data if there is a legal basis for doing so under Article 36 paragraph 1 of the Data Protection Act of 25 September 2020519 (FADP) or if:520 - a.
- disclosure of personal data is required to protect the life or physical integrity of the person concerned or of a third party;
- b.
- the person concerned has made their personal data general accessible and has not expressly prohibited the disclosure of the data.
518 Inserted by No II 2 of the FA of 28 Sept. 2018 on the implementation of Directive (EU) 2016/680 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, in force since 1 March 2019 (AS 2019 625; BBl 2017 6941). 519 SR 235.1 520 Amended by Annex 1 No II 26 of the Data Protection Act of 25 Sept. 2020, in force since 1 Sept. 2023 (AS 2022 491; BBl 2017 6941).
|
Art. 349b521
1 For the disclosure of personal data to the competent authorities of states linked to Switzerland by one of the Schengen association agreements (Schengen States), no stricter data protection rules may apply than for the disclosure of personal data to Swiss criminal authorities. 2 Special laws providing for stricter data protection rules for the disclosure of personal data to the competent foreign authorities do not apply to disclosure to the competent authorities of the Schengen States. 521 Inserted by No II 2 of the FA of 28 Sept. 2018 on the implementation of Directive (EU) 2016/680 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, in force since 1 March 2019 (AS 2019 625; BBl 2017 6941).
|
Art. 349c522
c. Disclosure of personal data to a third country or an international body
1 Personal data may not be disclosed to the competent authority of a state which is not linked to Switzerland by one of the Schengen association agreements (third country), or to an international body if this would seriously endanger the privacy of the data subjects, in particular due to a lack of adequate protection. 2 Adequate protection shall be ensured by: - a.
- the legislation of the third country, if the European Union has so provided in a in a resolution;
- b.
- an international treaty;
- c.
- specific guarantees.
3 If the disclosing authority is a federal authority, it shall inform the Federal Data Protection and Information Commissioner (FDPIC) of the categories of disclosures of personal data made on the basis of specific guarantees pursuant to paragraph 2 letter c. Every disclosure is documented.523 4 By way of derogation from paragraph 1, personal data may be disclosed to the competent authority of a third country or an international body if disclosure is necessary in a particular case: - a.
- to protect the life or the physical integrity of the data subject or of a third party;
- b.
- to prevent imminent serious danger threatening the public security of a Schengen or a third country;
- c.
- to prevent, detect or prosecute a criminal offence, provided that disclosure does not conflict with the overriding legitimate interests of the data subject;
- d.
- to exercise or enforce legal claims against an authority responsible for the prevention, detection or prosecution of a criminal offence, provided that disclosure does not conflict with the overriding legitimate interests of the data subject.
5 If the disclosing authority is a federal authority, it shall inform the FDPIC524 of the disclosures pursuant to paragraph 4. 522 Inserted by No II 2 of the FA of 28 Sept. 2018 on the implementation of Directive (EU) 2016/680 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, in force since 1 March 2019 (AS 2019 625; BBl 2017 6941). 523 Amended by Annex 1 No II 26 of the Data Protection Act of 25 Sept. 2020, in force since 1 Sept. 2023 (AS 2022 491; BBl 2017 6941). 524 Abbreviation in accordance with Annex 1 No II 26 of the Data Protection Act of 25 Sept. 2020, in force since 1 Sept. 2023 (AS 2022 491; BBl 2017 6941). This amendment has been made in the provisions specified in the AS.
|
Art. 349d525
d. Disclosure of personal data by a Schengen State to a third country or an international body
1 Personal data transmitted or made available by a Schengen State may be disclosed to the competent authority of a third country or an international body, only if: - a.
- the disclosure is necessary to prevent, detect or prosecute a criminal offence;
- b.
- the Schengen State which transmitted or made available the personal data has given its prior consent to the disclosure; and
- c.
- the requirements under Article 349c are fulfilled.
2 By way of derogation from paragraph 1 letter b, personal data may be disclosed in a particular case, if: - a.
- the prior consent of the Schengen State not cannot be obtained in time; and
- b.
- disclosure is essential to prevent an imminent serious threat to the public security of a Schengen State or a third country or for safeguarding the essential interests of a Schengen State.
3 The Schengen State shall be informed immediately of the disclosure referred to in paragraph 2. 525 Inserted by No II 2 of the FA of 28 Sept. 2018 on the implementation of Directive (EU) 2016/680 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, in force since 1 March 2019 (AS 2019 625; BBl 2017 6941).
|
Art. 349e526
e. Disclosure of personal data to a recipient established in a third country
1 Where it is not possible, in particular in cases of emergency, to disclose personal data to the competent authority of a third country through the normal channels of police cooperation, the competent authority may exceptionally disclose them to a recipient established in that country, provided the following requirements are fulfilled: - a.
- The disclosure is essential to fulfil a statutory task of the authority disclosing the data.
- b.
- No overriding interests of the data subject worthy of protection stand in the way of disclosure.
2 The competent authority shall inform the recipient of the personal data at the time of disclosure that he may use the data only for the purposes specified by the authority. 3 It shall inform the competent authority of the third country without delay of any disclosure of personal data, provided it considers this appropriate. 4 If the responsible authority is a federal authority, it shall inform the FDPIC without delay of any disclosure pursuant to paragraph 1. 5 It shall document each disclosure of personal data. The Federal Council shall regulate the details. 526 Inserted by No II 2 of the FA of 28 Sept. 2018 on the implementation of Directive (EU) 2016/680 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, in force since 1 March 2019 (AS 2019 625; BBl 2017 6941).
|
Art. 349f527
f. Accuracy of personal data
1 The competent authority shall correct incorrect personal data without delay. 2 It shall notify the authority which transmitted the data, made them available or disclosed them of the correction without delay.
3 It shall inform the recipient whether the data it has disclosed are up-to-date and reliable. 4 It shall also provide the recipient with any further information that can be used to distinguish: - a.
- the different categories of data subjects;
- b.
- personal data based on facts and on personal assessments.
5 The obligation to inform the recipient ceases to apply if the information referred to in paragraphs 3 and 4 is clear from the personal data itself or from the circumstances. 527 Inserted by No II 2 of the FA of 28 Sept. 2018 on the implementation of Directive (EU) 2016/680 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, in force since 1 March 2019 (AS 2019 625; BBl 2017 6941).
|
Art. 349g528
g. Verification of the legality of the data processing
1 The data subject may request the FDPIC to check whether any data relating to the data subject is being processed lawfully if: - a.
- the data subject’s right to information about the exchange of data about them is restricted or deferred (Art. 19 and 20 FADP529);
- b.
- his or her right to information is denied, restricted or deferred (Art. 25 and 26 FADP); or
- c.
- his or her right to request the rectification, destruction or deletion of data relating to him or her is partially or completely denied (Art. 41 para. 2 let. a FADP).530
2 Only a federal authority under the supervision of the FDPIC may be examined. 3 The Commissioner shall complete the verification; he shall notify the data subject that either no data relating to him or her has been unlawfully processed, or that he has opened an investigation pursuant to Article 49 FADP in the case of errors in the processing of personal data.531 4 If the FDPIC finds errors in the processing of the data, he shall order the competent federal authority to correct them. 5 The notification referred to in paragraph 3 shall always be worded in the same way and is not substantiated. It may not be contested. 528 Inserted by No II 2 of the FA of 28 Sept. 2018 on the implementation of Directive (EU) 2016/680 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, in force since 1 March 2019 (AS 2019 625; BBl 2017 6941). 529 SR 235.1 530 Amended by Annex 1 No II 26 of the Data Protection Act of 25 Sept. 2020, in force since 1 Sept. 2023 (AS 2022 491; BBl 2017 6941). 531 Amended by Annex 1 No II 26 of the Data Protection Act of 25 Sept. 2020, in force since 1 Sept. 2023 (AS 2022 491; BBl 2017 6941).
|
Art. 349h532
1 If a data subject credibly demonstrates that an exchange of personal data concerning him or her could violate the provisions on the protection of personal data, he or she may request the FDPIC to open an investigation pursuant to Article 49 FADP533.534 2 An investigation may only be opened against a federal authority that is under the supervision of the FDPIC. 3 The parties are the data subject and the federal authority against which the investigation has been opened. 4 Articles 50 and 51 FADP also apply.535 532 Inserted by No II 2 of the FA of 28 Sept. 2018 on the implementation of Directive (EU) 2016/680 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, in force since 1 March 2019 (AS 2019 625; BBl 2017 6941). 533 SR 235.1 534 Amended by Annex 1 No II 26 of the Data Protection Act of 25 Sept. 2020, in force since 1 Sept. 2023 (AS 2022 491; BBl 2017 6941). 535 Amended by Annex 1 No II 26 of the Data Protection Act of 25 Sept. 2020, in force since 1 Sept. 2023 (AS 2022 491; BBl 2017 6941).
|
Art. 350
2. Cooperation with INTERPOL
a. Jurisdiction
1 The Federal Office of Police carries out the duties of a National Central Bureau in terms of the Constitution and General Regulations of the International Criminal Police Organization (INTERPOL). 2 It is responsible for coordinating the exchange of information between the federal and cantonal prosecution services on the one hand and the National Central Bureaus of other states and the General Secretariat of INTERPOL on the other.
|
Art. 351
1 The Federal Office of Police coordinates the exchange of police information for the investigation and prosecution offences and for the execution of sentences and measures. 2 It may transmit police information for the purpose of preventing offences if there are specific indications that there is a serious probability of a felony or misdemeanour being committed. 3 It may coordinate the exchange of information relating to searches for missing persons and for the identification of unknown persons. 4 In the interest of preventing and investigating offences, the Federal Office of Police may receive and provide information from and to private individuals if this is in the interests of the persons concerned and their consent has been given or may be assumed in the circumstances.
|
Art. 352
1 The exchange of police information is governed by the principles of the Mutual Assistance Act of 20 March 1981539 as well as the Constitution and General Regulations of INTERPOL declared to be applicable by the Federal Council. 2 The FADP540 applies to the exchange of information in connection with searches for missing persons and the identification of unknown persons and for administrative purposes.541 3 The Federal Office may provide information directly to the Central Bureaus of other states provided the recipient state is subject to the INTERPOL data protection regulations.
|
Art. 353
d. Financial aid and other payments
The Confederation may provide financial aid and make payments to INTERPOL.
|
Art. 354543
3. Cooperation in connection with the identification of persons
1 The responsible department shall register and store biometric criminal records data recorded and transmitted to the department by cantonal, federal and foreign authorities in connection with criminal proceedings or in fulfilment of other statutory duties. This data may be used for comparison purposes to identify a wanted or unknown person. 2 The following authorities may use and process data in terms of paragraph 1: - a.
- the Federal Office of Police;
- b.
- the State Secretariat for Migration (SEM);
- c.
- the Federal Office of Justice;
- d.
- the Federal Office for Customs and Border Security544;
- e.
- the Swiss representations abroad responsible for issuing visas;
- f.
- the Federal Intelligence Service;
- g.
- the cantonal police authorities;
- h.
- the cantonal migration authorities.545
3 Personal data that relates data in accordance with paragraph 1 shall be processed in separate information systems; the procedure is subject to the provisions of the Federal Act of 13 June 2008546 on Federal Police Information Systems, the Asylum Act of 26 June 1998547 and the Foreign Nationals and Integration Act of 16 December 2005548 and the Customs Act of 18 March 2005549. 4 The data may be used: - a.
- until the expiry of the deadlines for the deletion of DNA profiles specified in Articles 16–19 des DNA Profiling Act of 20 June 2003550; or
- b.551
- in the case of a conviction for a contravention: for up to five years from the date of the judgment, provided the judgment is final.552
5 The Federal Council shall regulate the details, and in particular the retention period for data that is recorded outside criminal proceedings, the deletion procedure and cooperation with the cantons. It shall regulate the transmission of criminal records data by the competent federal authorities and the cantons.553 6 SEM or the Federal Office of Police (fedpol) may transmit the data in an automated procedure to the national section of the Schengen Information System (SIS) for the purpose of issuing alerts.554 543 Amended by Annex 1 No 3 of the Criminal Records Register Act of 17 June 2016, in force since 23 Jan. 2023 (AS 2022 600; BBl 2014 5713). 544 The name of this administrative unit was changed in application of Art. 20 para. 2 of the Publications Ordinance of 7 Oct. 2015 (SR 170.512.1). 545 Amended by Annex 2 No 1 of the FedD of 18 Dec. 2020 on the Approval and Implementation of the Exchange of Notes between Switzerland and the EU relating to the Adoption of the Legislation on the Establishment, Operation and Use of the Schengen Information System (SIS), in force since 23 Jan. 2023 (AS 2021 365; 2022 638; BBl 2020 3465). 546 SR 361 547 SR 142.31 548 SR 142.20 549 SR 631.0 550 SR 363 551 Amended by Annex No 1 of the FA of 17 Dec. 2021, in force since 1 Aug. 2023 (AS 2023 309; BBl 2021 44). 552 Amended by Annex 2 No 1 of the FedD of 18 Dec. 2020 on the Approval and Implementation of the Exchange of Notes between Switzerland and the EU relating to the Adoption of the Legislation on the Establishment, Operation and Use of the Schengen Information System (SIS), in force since 23. Jan. 2023 (AS 2021 365; 2022 638; BBl 2020 3465). 553 Amended by Annex 2 No 1 of the FedD of 18 Dec. 2020 on the Approval and Implementation of the Exchange of Notes between Switzerland and the EU relating to the Adoption of the Legislation on the Establishment, Operation and Use of the Schengen Information System (SIS), in force since 23. Jan. 2023 (AS 2021 365; 2022 638; BBl 2020 3465). 554 Inserted by Annex 2 No 1 of the FedD of 18 Dec. 2020 on the Approval and Implementation of the Exchange of Notes between Switzerland and the EU relating to the Adoption of the Legislation on the Establishment, Operation and Use of the Schengen Information System (SIS), in force since 23. Jan. 2023 (AS 2021 365; 2022 638; BBl 2020 3465).
|
Art. 355555
555 Repealed by Annex 1 No 5 of the FA of 13 June 2008 on the Federal Police Information System, with effect from 5 Dec. 2008 (AS 20084989; BBl 20065061).
|
Art. 355a557
5. Cooperation with Europol
a. Exchange of data
1 fedpol and the Federal Intelligence Service (FIS) may pass on personal data, including sensitive personal data to the European Police Office (Europol).558
2 The passing on of such data is subject in particular to the requirements of Articles 3 and 10–13 of the Agreement of 24 September 2004559 between the Swiss Confederation and the European Police Office. 3 At the same time as passing on data, the Federal Office of Police shall notify Europol of the purpose for which the data is provided as well as of any restrictions with regard to its processing to which it is itself subject in accordance with federal or cantonal legislation. 4 The exchange of personal data with Europol is regarded as equivalent to an exchange with a competent authority of a Schengen State (Art. 349b).560 557 Inserted by Art. 2 of the FedD of 7 Oct. 2005 on the Approval and Implementation of the Agreement between Switzerland and Europol, in force since 1 April 2006 (AS 2006 10171018; BBl 2005 983). 558 Amended by Annex 2 No 1 of the FedD of 18 Dec. 2020 on the Approval and Implementation of the Exchange of Notes between Switzerland and the EU relating to the Adoption of the Legislation on the Establishment, Operation and Use of the Schengen Information System (SIS), in force since 1 Sept. 2023 (AS 2021 365; 2022 491; BBl 2020 3465). 559 SR 0.360.268.2 560 Inserted by No II 2 of the FA of 28 Sept. 2018 on the implementation of Directive (EU) 2016/680 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, in force since 1 March 2019 (AS 2019 625; BBl 2017 6941).
|
Art. 355b562
b. Extension of mandate
The Federal Council is authorised to agree with Europol amendments to the scope of its mandate in accordance with Article 3 paragraph 3 of the Agreement of 24 September 2004563 between the Swiss Confederation and the European Police Office. 562 Inserted by Art. 2 of the FedD of 7 Oct. 2005 on the Approval and Implementation of the Agreement between Switzerland and Europol, in force since 1 April 2006 (AS 2006 10171018; BBl 2005 983). 563 SR 0.360.268.2
|
Art. 355c564
5bis. Cooperation under the Schengen Association Agreement.
Jurisdiction
The federal and cantonal police authorities shall implement the provisions of the Schengen Association Agreement565 in accordance with domestic law. 564 Inserted by Art. 3 No 4 of the FedD of 17 Dec. 2004 on the Adoption and Implementation of the Bilateral Agreements between Switzerland and the EU on the Association to Schengen and Dublin, in force since 1 June 2008 (AS 20084472179; BBl 20045965). 565 Agreement of 26 Oct. 2004 between the Swiss Confederation, the European Union and the European Community on the Association of that State with the Implementation, Application and Development of the Schengen Acquis (SR 0.362.31); Agreement of 28 April 2005 between the Swiss Confederation and the Kingdom of Denmark on the Establishment of Rights and Obligations between these two States with a view to Cooperation on Schengen (SR 0.362.33); Agreement of 17 Dec. 2004 between the Swiss Confederation, the Republic of Iceland and the Kingdom of Norway on the implementation, application and development of the Schengen Acquis and on the criteria and procedure for determining the State responsible for examining an application for asylum lodged in Switzerland, Iceland or Norway (SR 0.362.32).
|
Art. 355d566
566 Inserted by Art. 3 No 4 of the FedD of 17 Dec. 2004 on the Adoption and Implementation of the Bilateral Agreements between Switzerland and the EU on the Association to Schengen and Dublin (AS 20084472179; BBl 20045965). Repealed by Annex 2 No II of the FA of 13 June 2008 on the Federal Police Information System, with effect from 5 Dec. 2008 (AS 20084989; BBl 20065061).
|
Art. 355e567
1 fedpol manages the central office for the exchange of supplementary information with the Schengen states (SIRENE Office).568 2 Das SIRENE Office is the contact, coordination and consultation point for the exchange of information in connection with the alerts in the SIS. It reviews the formal admissibility of Swiss and foreign alerts in the SIS. 567 Inserted by Art. 3 No 4 of the FedD of 17 Dec. 2004 on the Adoption and Implementation of the Bilateral Agreements between Switzerland and the EU on the Association to Schengen and Dublin, in force since 1 June 2008 (AS 20084472179; BBl 20045965). 568 Amended by Annex 1 No 4 of the FedD of 18 Dec. 2020 on the Approval and Implementation of the Exchange of Notes between Switzerland and the EU relating to the Adoption of the Legislation on the Establishment, Operation and Use of the Schengen Information System (SIS), in force since 22 Nov. 2022 (AS 2021 365, 2022 638; BBl 2020 3465).
|
Art. 355f–355g569
569 Inserted by No 4 of the FA of 19 March 2010 on the Implementation of Framework Decision 2008/977/JHA on the protection of personal data processed in the framework of police and judicial cooperation in criminal matters (AS 2010 3387; BBl 2009 6749). Repealed by No II 2 of the FA of 28 Sept. 2018 on the implementation of Directive (EU) 2016/680 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, with effect from 1 March 2019 (AS 2019 625; BBl 2017 6941).
|
Art. 356–361570
570 Repealed by Annex 1 No II 8 of the Criminal Procedure Code of 5 Oct. 2007, with effect from 1 Jan. 2011 (AS 2010 1881; BBl 2006 1085).
|
Art. 362571
6. Notification in relation to pornography
If an investigating authority establishes that pornographic articles (Art. 197 para. 4) have been produced in or imported from a foreign state, it shall immediately notify the Federal Central Office for Combating Pornography. 571 Amended by Annex No 1 of the FedD of 27 Sept. 2013 (Lanzarote Convention), in force since 1 July 2014 (AS 2014 1159; BBl 2012 7571).
|