Art. 349c440
c. Disclosure of personal data to a third country or an international body 1 Personal data may not be disclosed to the competent authority of a state which is not linked to Switzerland by one of the Schengen association agreements (third country), or to an international body if this would seriously endanger the privacy of the data subjects, in particular due to a lack of adequate protection. 2 Adequate protection shall be ensured by:
3 If the disclosing authority is a federal authority, it shall inform the Federal Data Protection and Information Commissioner (Commissioner) of the categories of disclosures of personal data made on the basis of specific guarantees pursuant to paragraph 2 letter c. Every disclosure is documented. 4 By way of derogation from paragraph 1, personal data may be disclosed to the competent authority of a third country or an international body if disclosure is necessary in a particular case:
5 If the disclosing authority is a federal authority, it shall inform the Commissioner of the disclosures pursuant to paragraph 4. 440 Inserted by No II 2 of the FA of 28 Sept. 2018 on the implementation of Directive (EU) 2016/680 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, in force since 1 March 2019 (AS 2019 625; BBl 2017 6941). |