Art. 4 - PrinciplesArt. 5 - Correctness of the dataArt. 6 - Cross-border disclosureArt. 7 - Data securityArt. 8 - Right to informationArt. 9 - Limitation of the duty to provide informationArt. 10 - Limitations of the right to information for journalistsArt. 10a - Data processing by third partiesArt. 11 - Certification procedureArt. 11a - Register of data files
Art. 16 - Responsible body and controlsArt. 17 - Legal basisArt. 17a - Automated data processing in pilot projectsArt. 18 - Collection of personal dataArt. 18a - Duty to provide information on the collection of personal dataArt. 18b - Restriction of the duty to provide informationArt. 19 - Disclosure of personal dataArt. 20 - Blocking disclosureArt. 21 - Offering documents to the Federal ArchivesArt. 22 - Processing for research, planning and statisticsArt. 23 - Private law activities of federal bodiesArt. 24 - RepealedArt. 25 - Claims and procedureArt. 25bis - Procedure in the event of the disclosure of official documents containing personal data
Art. 26 - Appointment and statusArt. 26a - Reappointment and termination of the term of officeArt. 26b - Secondary occupationArt. 27 - Supervision of federal bodiesArt. 28 - Advice to private personsArt. 29 - Investigations and recommendations in the private sectorArt. 30 - InformationArt. 31 - Additional tasksArt. 32 - Repealed
5 If the consent of the data subject is required for the processing of personal data, such consent is valid only if given voluntarily on the provision of adequate information. Additionally, consent must be given expressly in the case of processing of sensitive personal data or personality profiles.
1 The processing of personal data may be assigned to third parties by agreement or by law if:
1 The federal body that processes or arranges for the processing of personal data in fulfilment of its tasks is responsible for data protection.
1 If a federal body acts under private law, the provisions for the processing of personal data by private persons apply.
b. the requirements under which a federal body may arrange for the processing of personal data by a third party or for a third party;
1 Unless there are cantonal data protection regulations that ensure an adequate level of protection, Articles 1–11a, 16, 17, 18–22 and 25 paragraphs 1–3 of this Act apply to the processing of personal data by cantonal bodies in the implementation of federal law.
