Art. 4 - PrinciplesArt. 5 - Correctness of the dataArt. 6 - Cross-border disclosureArt. 7 - Data securityArt. 8 - Right to informationArt. 9 - Limitation of the duty to provide informationArt. 10 - Limitations of the right to information for journalistsArt. 10a - Data processing by third partiesArt. 11 - Certification procedureArt. 11a - Register of data files
Art. 16 - Responsible body and controlsArt. 17 - Legal basisArt. 17a - Automated data processing in pilot projectsArt. 18 - Collection of personal dataArt. 18a - Duty to provide information on the collection of personal dataArt. 18b - Restriction of the duty to provide informationArt. 19 - Disclosure of personal dataArt. 20 - Blocking disclosureArt. 21 - Offering documents to the Federal ArchivesArt. 22 - Processing for research, planning and statisticsArt. 23 - Private law activities of federal bodiesArt. 24 - RepealedArt. 25 - Claims and procedureArt. 25bis - Procedure in the event of the disclosure of official documents containing personal data
Art. 26 - Appointment and statusArt. 26a - Reappointment and termination of the term of officeArt. 26b - Secondary occupationArt. 27 - Supervision of federal bodiesArt. 28 - Advice to private personsArt. 29 - Investigations and recommendations in the private sectorArt. 30 - InformationArt. 31 - Additional tasksArt. 32 - Repealed
i. controller of the data file: private persons or federal bodies that decide on the purpose and content of a data file;
1 Any person may request information from the controller of a data file as to whether data concerning them is being processed.
2 The controller of a data file must notify the data subject:
3 The controller of a data file may arrange for data on the health of the data subject to be communicated by a doctor designated by the subject.
4 If the controller of a data file has personal data processed by a third party, the controller remains under an obligation to provide information. The third party is under an obligation to provide information if he does not disclose the identity of the controller or if the controller is not domiciled in Switzerland.
1 The controller of a data file may refuse, restrict or defer the provision of information where:
4 The private controller of a data file may further refuse, restrict or defer the provision of information where his own overriding interests so require and he does not disclose the personal data to third parties.
5 The controller of a data file must indicate the reason why he has refused, restricted or deferred access to information.
1 The controller of a data file that is used exclusively for publication in the edited section of a periodically published medium may refuse to provide information, limit the information or defer its provision provided:
5 In derogation from the provisions in paragraphs 2 and 3, the controller of data files is not required to declare his files if:
6 The Federal Council regulates the modalities for the declaration of data files for registration, the maintenance and the publication of the register, the appointment and duties of the data protection officer under paragraph 5 letter e and the publication of a list of controllers of data files that are relieved of the reporting obligation under paragraph 5 letters e and f.
1 The controller of the data file is obliged to inform the data subject of the collection of sensitive personal data or personality profiles; this duty to provide information also applies where the data is collected from third parties.
a. the controller of the data file;
4 The duty of the controller of the data file to provide information ceases to apply if the data subject has already been informed or, in cases under paragraph 3, if:
5 The controller of the data file may refuse, restrict or defer the provision of information subject to the requirements of Article 9 paragraphs 1 and 4.
a. the controller of the data file;
4 The duty of the controller of the data file to provide information ceases to apply if the data subject has already been informed or, in cases under paragraph 3, if:
1 The controllers of data files must register existing data files that must be registered under Article 11 within one year of the commencement of this Act at the latest.
Within a year of the commencement of this Act, the controllers of data files must take the required measures to inform data subjects in accordance with Article 4 paragraph 4 and Article 7a.
