Swiss FADP Article 51: Administrative measures

1 If data protection regulations have been violated, the FDPIC may order that the processing be modified, suspended or terminated, wholly or in part, and the personal data deleted or destroyed, wholly or in part.

2 It may delay or prohibit disclosure abroad if this violates the requirements of Article 16 or 17 or provisions relating to the disclosure of personal data abroad in other federal acts.

3 It may in particular order that the federal body or the private person: (a) provide him or her with information in accordance with Articles 16 paragraph 2 letters b and c and 17 paragraph 2; (b) take the measures in accordance with Articles 7 and 8; (c) inform the data subjects in accordance with Articles 19 and 21; (d) conduct a data protection impact assessment in accordance with Article 22; (e) consult him or her in accordance with Article 23; (f) provide him or her or, if applicable, the data subject with information in accordance with Article 24; (g) provide the data subject with the information specified in Article 25.

4 It may also order that private controllers with registered office or domicile abroad appoint a representative in accordance with Article 14.

5 If the federal body or the private person has taken the required measures during the investigation in order to restore compliance with the data protection regulations, the FDPIC may simply issue an official warning.