Swiss FADP Legal Text - Quick Access
Jump to a specific part of this legal text quickly.
Back to full legal text- Swiss Federal Act on Data Protection
- Chapter 1 (Art. 1 - 4) — Purpose, Scope of Application and Federal Supervisory Authority
- Article 1: Purpose
- Article 2: Personal and material scope of application
- Article 3: Territorial scope of application
- Article 4: Federal Data Protection and Information Commissioner
- Chapter 2 (Art. 5 - 18) — General Provisions
- Article 5: Definitions
- Article 6: Principles
- Article 7: Data protection by design and data protection by default
- Article 8: Data security
- Article 9: Processing by processors
- Article 10: Data protection officer
- Article 11: Code of conduct
- Article 12: Record of processing activities
- Article 13: Certification
- Article 14: Representative
- Article 15: Duties of the representative
- Article 16: Principles
- Article 17: Exceptions
- Article 18: Publication of personal data in electronic form
- Chapter 3 (Art. 19 - 24) — Duties of the Controller and of the Processor
- Article 19: Duty to provide information when collecting personal data
- Article 20: Exceptions from the duty to provide information and restrictions
- Article 21: Duty to provide information in the case of an automated individual decision
- Article 22: Data protection impact assessment
- Article 23: Consultation of the FDPIC
- Article 24: Notifications of data security breaches
- Chapter 4 (Art. 25 - 29) — Rights of the Data Subject
- Article 25: Right to information
- Article 26: Limitations on the right to information
- Article 27: Limitation on the right to information for the media
- Article 28: Right to data portability
- Article 29: Restrictions on the right to data portability
- Chapter 5 (Art. 30 - 32) — Special Provisions on Data Processing by Private Persons
- Article 30: Breaches of personality rights
- Article 31: Grounds for justification
- Article 32: Legal rights
- Chapter 6 (Art. 33 - 42) — Special Provisions on Data Processing by Federal Bodies
- Article 33: Control and responsibility in the case of the joint processing of personal data
- Article 34: Legal basis
- Article 35: Automated data processing as part of pilot trials
- Article 36: Disclosure of personal data
- Article 37: Objecting to the disclosure of personal data
- Article 38: Offering documents to the Federal Archives
- Article 39: Data processing for purposes not related to specific persons
- Article 40: Private law activities by federal bodies
- Article 41: Rights and procedures
- Article 42: Procedure for disclosing official documents that contain personal data
- Chapter 7 (Art. 43 - 59) — Federal Data Protection and Information Commissioner
- Article 43: Election and status
- Article 44: Term of office, re-election and termination of office
- 44a: Reprimand
- Article 45: Budget
- Article 46: Incompatibility
- Article 47: Additional occupation
- Recusal
- Article 48: Self-regulation of the FDPIC
- Article 49: Investigation
- Article 50: Powers
- Article 51: Administrative measures
- Article 52: Procedure
- Article 53: Coordination
- Article 54: Administrative assistance between Swiss authorities
- Article 55: Administrative assistance for foreign authorities
- Article 56: Register
- Article 57: Information
- Article 58: Further tasks
- Article 59: Fees
- Chapter 8 (Art. 60 - 66) — Criminal Provisions
- Article 60: Violation of the duty to provide information, the right to information and the duty to cooperate
- Article 61: Violation of duties of care
- Article 62: Violation of the professional duty of confidentiality
- Article 63: Disregard of decisions
- Article 64: Corporate criminal liability
- Article 65: Jurisdiction
- Article 66: Statute of limitations for prosecution
- Chapter 9 (Art. 67) — Conclusion of International Treaties
- Article 67: Conclusion of International Treaties
- Chapter 10 (Art. 68 - 74) — Final Provisions
- Article 68: Repeal and amendment of other legislation
- Article 69: Transitional provisions relating to ongoing instances of processing
- Article 70: Transitional provision relating to ongoing proceedings
- Article 71: Transitional provision relating to the data of legal entities
- Article 72: Transitional provision relating to the Commissioner's election and termination of office
- Transitional provision relating to the Commissioner’s employment contract
- Article 73: Coordination
- Article 74: Referendum and commencement
- Annex 1: Repeal and amendment of other legislation
- Annex 2: Coordination with other legislation
- Annexes
- Annex 1: Repeal and amendment of other legislation
- Annex 2: Coordination with other legislation
- Ordinance on Data Protection
- Chapter 1 (Art. 1 - 12) — General Provisions
- Article 1: Principles
- Article 2: Goals
- Article 3: Technical and organisational measures
- Article 4: Logging
- Article 5: Processing regulations for private persons
- Article 6: Processing regulations for federal bodies
- Article 7: Article 7: Processing by Processors
- Article 8: Assessing the adequacy of the data protection offered by a State, territory, specified sector in a State, or international body
- Article 9: Data protection clauses and specific guarantees
- Article 10: Standard data protection clauses
- Article 11: Binding corporate rules
- Article 12: Code of conduct and certification
- Chapter 2 (Art. 13 - 15) — Obligations of the Controller
- Article 13: Modalities of the duty to provide information
- Article 14: Retention of the data protection impact assessment
- Article 15: Report of breaches of data security
- Chapter 3 (Art. 16 - 22) — Rights of the Data Subject
- Article 16: Modalities
- Article 17: Responsibility
- Article 18: Deadline
- Article 19: Exception to the requirement not to charge fees
- Article 20: Scope of the right
- Article 21: Technical requirements for implementation
- Article 22: Deadline, modalities and responsibility
- Chapter 4 (Art. 23 - 24) — Special Provisions on Data Processing by Private Persons
- Article 23: Data protection officer
- Article 24: Exemption from the obligation to keep a record of processing activities
- Chapter 5 (Art. 25 - 35) — Special Provisions on Data Processing by Federal Bodies
- Article 25: Appointment
- Article 26: Requirements and tasks
- Article 27: Obligations of the federal body
- Article 28: Contact point for the FDPIC
- Article 29: Duty to provide information in the event of the disclosure of personal data
- Article 30: Duty to provide information in the event of the systematic collection of personal data
- Article 31: Article 31: Notifying the FDPIC of Projects for the Automated Processing of Personal Data
- Article 32: Mandatory nature of the pilot trial
- Article 33: Procedure for authorising the pilot trial
- Article 34: Evaluation report
- Article 35: Article 35: Data Processing for Purposes not related to Specific Persons
- Chapter 6 (Art. 36 - 44) — Federal Data Protection and Information Commissioner
- Article 36: Seat and permanent secretariat
- Article 37: Method of communication
- Article 38: Notice of decisions, guidelines and projects
- Article 39: Processing personal data
- Article 40: Self-regulation
- Article 41: Cooperation with the National Cybersecurity Centre
- Article 42: Register of processing activities by federal authorities
- Article 43: Code of conduct
- Article 44: Fees
- Chapter 7 (Art. 45 - 47) — Final Provisions
- Article 45: Repeal and amendment of other legislation
- Article 46: Transitional provisions
- Article 47: Commencement
- Annexes
- Article Annex 1: Annex 1
- Article Annex 2: Annex 2
- Ordinance on Data Protection Certification
- Article Annex: Minimum Qualification Requirements for Staff