Chapter 2 . Section 1
Swiss FADP Article 7: Data protection by design and data protection by default
1 The controller is obliged to arrange the data processing in technical and organisational terms so that the data protection regulations, and in particular the principles under Article 6, are respected. It shall take account of this from the planning stage.
2 The technical and organisational measures must in particular be appropriate with regard to the state of the art, the nature and the extent of the data processing and the risk that the processing poses to the data subject's personality or fundamental rights.
3 The controller is obliged to ensure by means of suitable default settings that the processing of personal data is limited to the minimum required for the purpose intended, unless the data subject specifies otherwise.
Switzerland enacts in German, French and Italian. This is Fedlex's English translation, which Fedlex itself publishes without legal force. Where a word matters, the German, French or Italian text governs and this page does not. Every other instrument in this library is reproduced from its own authentic language text; this one is the exception and says so on every page.
Source text reproduced from Fedlex, Classified Compilation SR 235.1, English translation, version in force from 1 September 2023 and marked for verification against the official source. Cross-checked against a second reproduction.