Data protection for private individuals in Switzerland

Art. 7 DPO

Processing by Processors

Chapter 1: General ProvisionsSection 2: Processing by Processors

Statutory textStatus: 1 December 2025

1 The prior approval from the controller that allows the processor to assign the data processing to a third party may be specific or general in its scope.

2 In the case of general approval, the processor shall inform the controller of any plan to engage additional or replace existing third parties. The controller may object to such changes.

Source: Version on FedlexThis translation is not an official version. Only the German, French and Italian versions are legally binding.

In brief

A processor may only assign processing to a third party with the prior approval of the controller (Art. 9 FADP). This approval may be specific or general. In the case of general approval, the processor must report any plan to engage additional or replace existing third parties, and the controller may object.

What does this mean for me?

This rule concerns the relationship between companies and their service providers. For you, it means: your data may not be passed on to further subcontractors without the knowledge of the responsible company.

Implements these provisions of the Federal Act on Data Protection (FADP)

  1. Art. 9 FADPProcessing by processors

Explanation by mydatenschutz.ch in plain language – not legal advice. The statutory text is authoritative.