Chapter 2 . Section 1
Swiss FADP Article 9: Processing by processors
1 The processing of personal data may be assigned by contract or by the legislation to a processor if: (a) the data is processed only in the manner in which the controller itself is permitted to do it; and (b) no statutory or contractual duty of confidentiality prohibits assignment.
2 The controller must satisfy itself in particular that the processor is able to guarantee data security.
3 The processor may only assign processing to a third party with prior approval from the controller.
4 It may claim the same grounds for justification as the controller.
Switzerland enacts in German, French and Italian. This is Fedlex's English translation, which Fedlex itself publishes without legal force. Where a word matters, the German, French or Italian text governs and this page does not. Every other instrument in this library is reproduced from its own authentic language text; this one is the exception and says so on every page.
Source text reproduced from Fedlex, Classified Compilation SR 235.1, English translation, version in force from 1 September 2023 and marked for verification against the official source. Cross-checked against a second reproduction.