Federal Act
on Data Protection
(Data Protection Act, FADP)

On com­plaint, a fine not ex­ceed­ing 250,000 francs shall be im­posed on private per­sons who wil­fully:

a.

dis­close per­son­al data abroad in vi­ol­a­tion of Art­icle 16 para­graphs 1 and 2 without sat­is­fy­ing the re­quire­ments of Art­icle 17;

b.

as­sign the data pro­cessing to a pro­cessor without sat­is­fy­ing the re­quire­ments of Art­icle 9 para­graphs 1 and 2;

c.

fail to com­ply with the min­im­um re­quire­ments for data se­cur­ity stip­u­lated by the Fed­er­al Coun­cil in Art­icle 8 para­graph 3.