Limitation of the duty to provide information
1 The controller of a data file may refuse, restrict or defer the provision of information where:
a. a formal enactment so provides;
b. this is required to protect the overriding interests of third parties.
2 A federal body may further refuse, restrict or defer the provision of information where:
a. this is required to protect overriding public interests, and in particular the internal or external security of the Confederation;
b. the information would jeopardise the outcome of a criminal investigation or any other investigation proceedings.
3 As soon as the reason for refusing, restricting or deferring the provision of information ceases to apply, the federal body must provide the information unless this is impossible or only possible with disproportionate inconvenience or expense.
4 The private controller of a data file may further refuse, restrict or defer the provision of information where his own overriding interests so require and he does not disclose the personal data to third parties.
5 The controller of a data file must indicate the reason why he has refused, restricted or deferred access to information.