Data protection for private individuals in Switzerland

Art. 17 DPO

Responsibility

Chapter 3: Rights of the Data SubjectSection 1: Right of Access

Statutory textStatus: 1 December 2025

1 Where two or more controllers are processing personal data jointly, the data subject may exercise his or her right of access in relation to any one of them.

2 If the request relates to data that is being processed by one processor, the processor shall assist the controller in providing the information where it does not answer the request on behalf of the controller.

Source: Version on FedlexThis translation is not an official version. Only the German, French and Italian versions are legally binding.

In brief

If several controllers process your data jointly, you can exercise your right of access against any of them. If the data is processed by a processor, the processor supports the controller in providing the information or answers the request on the controller’s behalf.

What does this mean for me?

You do not have to work out who is responsible internally: with joint controllers, it is enough to contact one of them.

Example

Two companies jointly run a customer loyalty programme. You can send your access request to either of them.

Implements these provisions of the Federal Act on Data Protection (FADP)

  1. Art. 25 FADPRight to information

Explanation by mydatenschutz.ch in plain language – not legal advice. The statutory text is authoritative.