Art. 4 - PrinciplesArt. 5 - Correctness of the dataArt. 6 - Cross-border disclosureArt. 7 - Data securityArt. 8 - Right to informationArt. 9 - Limitation of the duty to provide informationArt. 10 - Limitations of the right to information for journalistsArt. 10a - Data processing by third partiesArt. 11 - Certification procedureArt. 11a - Register of data files
Art. 16 - Responsible body and controlsArt. 17 - Legal basisArt. 17a - Automated data processing in pilot projectsArt. 18 - Collection of personal dataArt. 18a - Duty to provide information on the collection of personal dataArt. 18b - Restriction of the duty to provide informationArt. 19 - Disclosure of personal dataArt. 20 - Blocking disclosureArt. 21 - Offering documents to the Federal ArchivesArt. 22 - Processing for research, planning and statisticsArt. 23 - Private law activities of federal bodiesArt. 24 - RepealedArt. 25 - Claims and procedureArt. 25bis - Procedure in the event of the disclosure of official documents containing personal data
Art. 26 - Appointment and statusArt. 26a - Reappointment and termination of the term of officeArt. 26b - Secondary occupationArt. 27 - Supervision of federal bodiesArt. 28 - Advice to private personsArt. 29 - Investigations and recommendations in the private sectorArt. 30 - InformationArt. 31 - Additional tasksArt. 32 - Repealed
Art. 14
Duty to provide information on the collection of sensitive personal data and personality profiles
1 The controller of the data file is obliged to inform the data subject of the collection of sensitive personal data or personality profiles; this duty to provide information also applies where the data is collected from third parties.
2 The data subject must be notified as a minimum of the following:
a. the controller of the data file;
b. the purpose of the processing;
c. the categories of data recipients if a disclosure of data is planned.
3 If the data is not collected from the data subject, the data subject must be informed at the latest when the data is stored or if the data is not stored, on its first disclosure to a third party.
4 The duty of the controller of the data file to provide information ceases to apply if the data subject has already been informed or, in cases under paragraph 3, if:
a. the storage or the disclosure of the data is expressly provided for by law; or
b. the provision of information is not possible or possible only with disproportionate inconvenience or expense.
5 The controller of the data file may refuse, restrict or defer the provision of information subject to the requirements of Article 9 paragraphs 1 and 4.
