Federal Act
on Data Protection
(Data Protection Act, FADP)

¹ The con­trol­ler may re­fuse to provide in­form­a­tion, or re­strict or delay the pro­vi­sion of in­form­a­tion if:

a.

a form­al law so provides, in par­tic­u­lar in or­der to pre­serve pro­fes­sion­al secrecy;

b.

this is re­quired to safe­guard over­rid­ing third-party in­terests; or

c.

the re­quest for in­form­a­tion is ob­vi­ously un­jus­ti­fied, in par­tic­u­lar if does not serve the pur­pose of data pro­tec­tion or is clearly frivol­ous.

² Fur­ther­more, it is pos­sible to re­fuse, re­strict or delay the pro­vi­sion of in­form­a­tion in the fol­low­ing cases:

a.

The con­trol­ler is a private per­son and the fol­low­ing re­quire­ments are sat­is­fied:

1.

The con­trol­ler's own over­rid­ing in­terests re­quire the meas­ure.

2.

The con­trol­ler does not in­tend to dis­close the per­son­al data to third parties.

b.

The con­trol­ler is a fed­er­al body, and one of the fol­low­ing re­quire­ments is sat­is­fied:

1.

The meas­ure is re­quired to sat­is­fy over­rid­ing pub­lic in­terests, in par­tic­u­lar Switzer­land's in­tern­al or ex­tern­al se­cur­ity.

2.

The com­mu­nic­a­tion of the in­form­a­tion may com­prom­ise an en­quiry, an in­vest­ig­a­tion or ad­min­is­trat­ive or ju­di­cial pro­ceed­ings.

³ Leg­al en­tit­ies that be­long to the same group of com­pan­ies are not third parties with­in the mean­ing of para­graph 2 let­ter a num­ber 2.

⁴ The con­trol­ler must in­dic­ate why it is re­fus­ing, re­strict­ing or delay­ing the pro­vi­sion of the in­form­a­tion.