(7) The Swiss Data Protection Act of 19 June 1992 entered into force on 1 July 1993. The implementing rules for certain provisions of the Act concerning, in particular, the right of access of the persons concerned, the notification of processing operations to the independent supervisory authority, and the transfer of data to a foreign country were laid down by order of the Federal Council. The Act applies to the processing of personal data by Federal bodies and by the entire private sector, and to processing operations carried out by cantonal bodies pursuant to Federal law, where such processing is not subject to cantonal provisions on data protection.
1. This Decision may be amended at any time in the light of experience with its functioning or of changes in Swiss legislation.
The Commission shall evaluate the functioning of this Decision on the basis of available information, three years after its notification to the Member States and report any pertinent findings to the Committee established under Article 31 of Directive 95/46/EC, including any evidence that could affect the finding in Article 1 of this Decision that protection in Switzerland is adequate within the meaning of Article 25 of Directive 95/46/EC and any evidence that this Decision is being implemented in a discriminatory way.
Member States shall take all the measures necessary to comply with this Decision at the latest at the end of a period of 90 days from the date of its notification to the Member States.