Art. 4 - PrinciplesArt. 5 - Correctness of the dataArt. 6 - Cross-border disclosureArt. 7 - Data securityArt. 8 - Right to informationArt. 9 - Limitation of the duty to provide informationArt. 10 - Limitations of the right to information for journalistsArt. 10a - Data processing by third partiesArt. 11 - Certification procedureArt. 11a - Register of data files
Art. 16 - Responsible body and controlsArt. 17 - Legal basisArt. 17a - Automated data processing in pilot projectsArt. 18 - Collection of personal dataArt. 18a - Duty to provide information on the collection of personal dataArt. 18b - Restriction of the duty to provide informationArt. 19 - Disclosure of personal dataArt. 20 - Blocking disclosureArt. 21 - Offering documents to the Federal ArchivesArt. 22 - Processing for research, planning and statisticsArt. 23 - Private law activities of federal bodiesArt. 24 - RepealedArt. 25 - Claims and procedureArt. 25bis - Procedure in the event of the disclosure of official documents containing personal data
Art. 26 - Appointment and statusArt. 26a - Reappointment and termination of the term of officeArt. 26b - Secondary occupationArt. 27 - Supervision of federal bodiesArt. 28 - Advice to private personsArt. 29 - Investigations and recommendations in the private sectorArt. 30 - InformationArt. 31 - Additional tasksArt. 32 - Repealed
Art. 17a
Automated data processing in pilot projects
1 The Federal Council may, having consulted the Commissioner and before a formal enactment comes into force, approve the automated processing of sensitive personal data or personality profiles if:
a. the tasks that require such processing required are regulated in a formal enactment;
b. adequate measures are taken to prevent breaches of privacy;
c. a test phase before the formal enactment comes into force is indispensable for the practical implementation of data processing.
2 A test phase may be mandatory for the practical implementation of data processing if:
a. the fulfilment of a task requires technical innovations, the effects of which must first be evaluated;
b. the fulfilment of a task requires significant organisational or technical measures, the effectiveness of which must first be tested, in particular in the case of cooperation between federal and the cantonal bodies; or
c. processing requires that sensitive personal data or personality profiles be transmitted online to cantonal authorities.
3 The Federal Council shall regulate the modalities of automated data processing in an ordinance.
4 The competent federal body shall provide the Federal Council with an evaluation report at the latest within two years of the pilot system coming into operation. The report contains a proposal on whether the processing should be continued or terminated.
5 Automated data processing must be terminated in every case if within five years of the pilot systems coming into operation no formal enactment has come in force that contains the required legal basis.
