The following are authorised to exchange confidential data with foreign authorities and institutions or international bodies:
- the responsible ethics committee;
- the cantonal supervisory authority;
- the Swiss Agency for Therapeutic Products; and
- the FOPH.
Personal data may be disclosed abroad provided the Federal Council has established that the legislation in the State concerned or the international body guarantees an adequate level of protection in accordance with Article 16 paragraph 1 of the Data Protection Act of 25 September 2020 (FADP). If no assessment from the Federal Council is available, personal data may be disclosed abroad if there are sufficient guarantees, in particular contractual guarantees, to ensure an adequate level of protection in the State concerned.
In derogation from Article 16 paragraphs 1 and 2 FADP personal data may be disclosed abroad in the following cases:
- Disclosure is required in order to protect the life or the physical integrity of the data subject or a third party and it is not possible to obtain the consent of the data subject within a reasonable time.
- Disclosure is essential in order to avert an imminent danger to public health.
- The data subject has expressly consented to disclosure.
If personal data are disclosed abroad, the enforcement authority shall notify the data subject of the State or the international body to which they have been disclosed and if applicable of the guarantees in accordance with Article 16 paragraph 2 FADP or of the application of an exception under Article 17 FADP.