Federal Act on Data Protection

¹The con­trol­ler of a data file may re­fuse, re­strict or de­fer the pro­vi­sion of in­form­a­tion where:

a.

a form­al en­act­ment so provides;

b.

this is re­quired to pro­tect the over­rid­ing in­terests of third parties.

²A fed­er­al body may fur­ther re­fuse, re­strict or de­fer the pro­vi­sion of in­form­a­tion where:

a.

this is re­quired to pro­tect over­rid­ing pub­lic in­terests, and in par­tic­u­lar the in­tern­al or ex­tern­al se­cur­ity of the Con­fed­er­a­tion;

b.

the in­form­a­tion would jeop­ard­ise the out­come of a crim­in­al in­vest­ig­a­tion or any oth­er in­vest­ig­a­tion pro­ceed­ings.

³As soon as the reas­on for re­fus­ing, re­strict­ing or de­fer­ring the pro­vi­sion of in­form­a­tion ceases to ap­ply, the fed­er­al body must provide the in­form­a­tion un­less this is im­possible or only pos­sible with dis­pro­por­tion­ate in­con­veni­ence or ex­pense.

⁴The private con­trol­ler of a data file may fur­ther re­fuse, re­strict or de­fer the pro­vi­sion of in­form­a­tion where his own over­rid­ing in­terests so re­quire and he does not dis­close the per­son­al data to third parties.

⁵The con­trol­ler of a data file must in­dic­ate the reas­on why he has re­fused, re­stric­ted or de­ferred ac­cess to in­form­a­tion.