Federal Act
on Data Protection
(Data Protection Act, FADP)

¹ The duty to provide in­form­a­tion un­der Art­icle 19 ceases to ap­ply if one of the fol­low­ing re­quire­ments is sat­is­fied:

a.

The data sub­ject already has the in­form­a­tion con­cerned.

b.

The pro­cessing is re­quired by law.

c.

The con­trol­ler is a private per­son who is re­quired by law to pre­serve con­fid­en­ti­al­ity.

d.

The re­quire­ments of Art­icle 27 are sat­is­fied.

² If the per­son­al data is not col­lec­ted from the data sub­ject, the duty to provide in­form­a­tion also ceases to ap­ply if any one of the fol­low­ing re­quire­ments is sat­is­fied:

a.

It is not pos­sible to provide the in­form­a­tion.

b.

Provid­ing the in­form­a­tion re­quires dis­pro­por­tion­ate ef­fort.

³ The con­trol­ler may re­strict, delay or dis­pense with the pro­vi­sion of the in­form­a­tion in the fol­low­ing cases:

a.

It is re­quired to do so be­cause of over­rid­ing third party in­terests.

b.

Provid­ing the in­form­a­tion de­feats the pur­pose of the pro­cessing.

c.

The con­trol­ler is a private per­son and the fol­low­ing re­quire­ments are sat­is­fied:

1.

The con­trol­ler is re­quired to do so be­cause of its own over­rid­ing in­terests.

2.

The con­trol­ler does not in­tend to dis­close the per­son­al data to third parties.

d.

The con­trol­ler is a fed­er­al body and any one of the fol­low­ing re­quire­ments is sat­is­fied:

1.

The meas­ure is re­quired to sat­is­fy over­rid­ing pub­lic in­terests, in par­tic­u­lar to pro­tect Switzer­land's in­tern­al or ex­tern­al se­cur­ity.

2.

The com­mu­nic­a­tion of the in­form­a­tion may com­prom­ise an en­quiry, an in­vest­ig­a­tion or ad­min­is­trat­ive or ju­di­cial pro­ceed­ings.

⁴ Leg­al en­tit­ies that be­long to the same group of com­pan­ies are not third parties with­in the mean­ing of para­graph 3 let­ter c num­ber 2.