4 If the controller of a data file has personal data processed by a third party, the controller remains under an obligation to provide information. The third party is under an obligation to provide information if he does not disclose the identity of the controller or if the controller is not domiciled in Switzerland.
2 The instructing party must in particular ensure that the third party guarantees data security.
3 If the data is not collected from the data subject, the data subject must be informed at the latest when the data is stored or if the data is not stored, on its first disclosure to a third party.
3 If the data is not collected from the data subject, the data subject must be informed at the latest when the data is stored or if the data is not stored, on its first disclosure to a third party.
2 The Commissioner investigates cases either on his own initiative or at the request of a third party.
1 The Commissioner shall investigate cases in more detail on his own initiative or at the request of a third party if:
b. the requirements under which a federal body may arrange for the processing of personal data by a third party or for a third party;