Federal Act
on Data Protection
(Data Protection Act, FADP)

¹ If the data pro­tec­tion im­pact as­sess­ment in­dic­ates that the planned pro­cessing des­pite the meas­ures planned by the con­trol­ler will still pose a high risk to the per­son­al­ity or the data sub­ject's fun­da­ment­al rights, the con­trol­ler shall seek the FD­PIC's opin­ion be­fore­hand.

² The FD­PIC shall in­form the con­trol­ler with­in two months of any ob­jec­tions to the planned pro­cessing. This dead­line may be ex­ten­ded by one month if the data pro­cessing is com­plex.

³ If the FD­PIC ob­jects to the planned pro­cessing, he or she shall pro­pose suit­able meas­ures to the con­trol­ler.

⁴ A private con­trol­ler may dis­pense with con­sult­ing the FD­PIC if it has con­sul­ted the data pro­tec­tion of­ficer un­der Art­icle 10.