Federal Act
on Data Protection
(Data Protection Act, FADP)

In this Act:

a.

per­son­al data means any in­form­a­tion re­lat­ing to an iden­ti­fied or iden­ti­fi­able nat­ur­al per­son;

b.

data sub­ject means a nat­ur­al per­son whose per­son­al data is pro­cessed;

c.

sens­it­ive per­son­al datameans:

1.

data re­lat­ing to re­li­gious, philo­soph­ic­al, polit­ic­al or trade uni­on-re­lated views or activ­it­ies,

2.

data re­lat­ing to health, the private sphere or af­fil­i­ation to a race or eth­ni­city,

3.

ge­net­ic data,

4.

bio­met­ric data that uniquely iden­ti­fies a nat­ur­al per­son,

5.

data re­lat­ing to ad­min­is­trat­ive and crim­in­al pro­ceed­ings or sanc­tions,

6.

data re­lat­ing to so­cial as­sist­ance meas­ures;

d.

pro­cessing means any hand­ling of per­son­al data, ir­re­spect­ive of the means and pro­ced­ures used, in par­tic­u­lar the col­lec­tion, stor­age, keep­ing, use, modi­fic­a­tion, dis­clos­ure, archiv­ing, de­le­tion or de­struc­tion of data;

e.

dis­clos­uremeans trans­mit­ting per­son­al data or mak­ing such data ac­cess­ible;

f.

pro­fil­ing means any form of auto­mated pro­cessing of per­son­al data con­sist­ing of the use of per­son­al data to eval­u­ate cer­tain per­son­al as­pects re­lat­ing to a nat­ur­al per­son, in par­tic­u­lar to ana­lyse or pre­dict as­pects con­cern­ing that nat­ur­al per­son's per­form­ance at work, eco­nom­ic situ­ation, health, per­son­al pref­er­ences, in­terests, re­li­ab­il­ity, be­ha­viour, loc­a­tion or move­ments;

g.

high-risk pro­fil­ing means pro­fil­ing that poses a high risk to the data sub­ject's per­son­al­ity or fun­da­ment­al rights by match­ing data that al­low an as­sess­ment to be made of es­sen­tial as­pects of the per­son­al­ity of a nat­ur­al per­son;

h.

breach of data se­cur­ity means a breach of se­cur­ity that leads to the ac­ci­dent­al or un­law­ful loss, de­le­tion, de­struc­tion or modi­fic­a­tion or un­au­thor­ised dis­clos­ure or ac­cess to per­son­al data;

i.

fed­er­al body means an au­thor­ity or ser­vice of the Con­fed­er­a­tion or a per­son en­trus­ted to carry out pub­lic tasks on be­half of the Con­fed­er­a­tion;

j.

con­trol­lermeans a private per­son who or fed­er­al body which, alone or jointly with oth­ers, de­term­ines the pur­pose and the means of pro­cessing per­son­al data;

k.

pro­cessor means a private per­son or fed­er­al body that pro­cesses per­son­al data on be­half of the con­trol­ler.