Federal Act
on Data Protection
(Data Protection Act, FADP)

¹ If data pro­tec­tion reg­u­la­tions have been vi­ol­ated, the FD­PIC may or­der that the pro­cessing be mod­i­fied, sus­pen­ded or ter­min­ated, wholly or in part, and the per­son­al data de­leted or des­troyed, wholly or in part.

² It may delay or pro­hib­it dis­clos­ure abroad if this vi­ol­ates the re­quire­ments of Art­icle 16 or 17 or pro­vi­sions re­lat­ing to the dis­clos­ure of per­son­al data abroad in oth­er fed­er­al acts.

³ It may in par­tic­u­lar or­der that the fed­er­al body or the private per­son:

a.

provide him or her with in­form­a­tion in ac­cord­ance with Art­icles 16 para­graph 2 let­ters b and c and 17 para­graph 2;

b.

take the meas­ures in ac­cord­ance with Art­icles 7 and 8;

c.

in­form the data sub­jects in ac­cord­ance with Art­icles 19 and 21;

d.

con­duct a data pro­tec­tion im­pact as­sess­ment in ac­cord­ance with Art­icle 22;

e.

con­sult him or her in ac­cord­ance with Art­icle 23;

f.

provide him or her or, if ap­plic­able, the data sub­ject with in­form­a­tion in ac­cord­ance with Art­icle 24;

g.

provide the data sub­ject with the in­form­a­tion spe­cified in Art­icle 25.

⁴ It may also or­der that private con­trol­lers with re­gistered of­fice or dom­i­cile abroad ap­point a rep­res­ent­at­ive in ac­cord­ance with Art­icle 14.

⁵ If the fed­er­al body or the private per­son has taken the re­quired meas­ures dur­ing the in­vest­ig­a­tion in or­der to re­store com­pli­ance with the data pro­tec­tion reg­u­la­tions, the FD­PIC may simply is­sue an of­fi­cial warn­ing.