Federal Act on Data Protection

¹Any per­son may re­quest in­form­a­tion from the con­trol­ler of a data file as to wheth­er data con­cern­ing them is be­ing pro­cessed.

²The con­trol­ler of a data file must no­ti­fy the data sub­ject:¹

a.²

of all avail­able data con­cern­ing the sub­ject in the data file, in­clud­ing the avail­able in­form­a­tion on the source of the data;

b.

the pur­pose of and if ap­plic­able the leg­al basis for the pro­cessing as well as the cat­egor­ies of the per­son­al data pro­cessed, the oth­er parties in­volved with the file and the data re­cip­i­ent.

³The con­trol­ler of a data file may ar­range for data on the health of the data sub­ject to be com­mu­nic­ated by a doc­tor des­ig­nated by the sub­ject.

⁴If the con­trol­ler of a data file has per­son­al data pro­cessed by a third party, the con­trol­ler re­mains un­der an ob­lig­a­tion to provide in­form­a­tion. The third party is un­der an ob­lig­a­tion to provide in­form­a­tion if he does not dis­close the iden­tity of the con­trol­ler or if the con­trol­ler is not dom­i­ciled in Switzer­land.

⁵The in­form­a­tion must nor­mally be provided in writ­ing, in the form of a prin­tout or a pho­to­copy, and is free of charge. The Fed­er­al Coun­cil reg­u­lates ex­cep­tions.

⁶No one may waive the right to in­form­a­tion in ad­vance.