Federal Act on Data Protection

¹Fed­er­al bod­ies are ob­liged to in­form the data sub­ject of the col­lec­tion of per­son­al data; this duty to provide in­form­a­tion also ap­plies where the data is col­lec­ted from third parties.

²The data sub­ject must be no­ti­fied as a min­im­um of the fol­low­ing:

a.

the con­trol­ler of the data file;

b.

the pur­pose of pro­cessing;

c.

the cat­egor­ies of the data re­cip­i­ents where a dis­clos­ure of data is planned;

d.

the right to in­form­a­tion in ac­cord­ance with Art­icle 8;

e.

the con­sequences of the re­fus­al of the data sub­ject to provide the re­ques­ted per­son­al data.

³If the data is not col­lec­ted from the data sub­ject, the data sub­ject must be in­formed at the latest when the data is stored or if the data is not stored, on its first dis­clos­ure to a third party.

⁴The duty of the con­trol­ler of the data file to provide in­form­a­tion ceases to ap­ply if the data sub­ject has already been in­formed or, in cases un­der para­graph 3, if:

a.

the stor­age or the dis­clos­ure of the data is ex­pressly provided for by law; or

b.

the pro­vi­sion of in­form­a­tion is not pos­sible or pos­sible only with dis­pro­por­tion­ate in­con­veni­ence or ex­pense.

⁵If the duty to provide in­form­a­tion would com­prom­ise the com­pet­it­ive­ness of a fed­er­al body, the Fed­er­al Coun­cil may lim­it the ap­plic­a­tion of the duty to the col­lec­tion of sens­it­ive per­son­al data and per­son­al­ity pro­files.