Can I request my data from a company in Switzerland?
Yes — you have a right of access to your personal data. Under the revised Data Protection Act (revDSG, since September 2023), anyone can ask any controller whether and which personal data about them is processed, and obtain a copy — with no justification. The access is free as a rule and must be given within 30 days. What must be disclosed includes the controller's identity, the data processed, the purpose, the retention period, the origin and the recipients. Supervised by the EDÖB. For cantonal/communal bodies, the cantonal data-protection authority is competent. In short: yes, free and within 30 days.
📋 The rules
- Right of access under revDSG (since Sept 2023)
- From any controller, with no justification
- Free as a rule
- Reply within 30 days
- Supervision: EDÖB (cantonal: cantonal authority)
🔓 Exceptions
- Fee up to CHF 300 only for disproportionate effort (notified in advance)
- Restriction possible for overriding interests/business secrets
- Cantonal/communal bodies: cantonal data-protection officer
⚠️ Penalties & fines
A controller who gives no or false information breaches the Data Protection Act; you can turn to the EDÖB and enforce your right under civil law (no court costs in the DSG procedure). Deliberately false information can additionally be fined. Beware a myth: "a company can always charge a fee for the access" is false — the first access is free as a rule, and a fee (up to CHF 300) is only allowed for disproportionate effort and after prior notice. Tip: make a written access request and record the 30-day deadline.
📎 Official sources
❓ Frequently asked
Can I request my data?
Yes. Under the revised Data Protection Act, you can ask any company or organisation whether and which personal data about you is processed, and obtain a copy of it. You don't have to justify a request; the right is in principle available to you without conditions or reasons.
How long does the company have?
The controller must give the information as a rule within 30 days of receiving the request. If the deadline can't exceptionally be met, they must inform you and provide the information as quickly as possible afterwards. Keep a record of when you sent your request to track it.
Do I have to pay?
As a rule no, the access is free. A fee of up to CHF 300 is only allowed if processing causes disproportionate effort, and the controller must notify you of it in advance. That way you can decide whether to maintain your request before the fee is charged to you.
What must the company disclose?
What must be disclosed includes the controller's identity, the data processed about you, the purpose of processing, the retention period, the origin of the data, any automated decisions and the recipients. This lets you understand what's happening with your personal data and why.
What if the company doesn't reply?
If the controller gives no or false information, you can turn to the Federal Data Protection and Information Commissioner and enforce your right under civil law. No court costs arise in the data-protection procedure. Deliberately false information can additionally be fined under the law.
🔎 Common searches
What people search to land here:
- “right to access data switzerland”
- “request my data company switzerland”
- “revdsg access”
- “edöb right of access”
- “data protection access switzerland”
- “request data copy switzerland”