Report of a data protection violation by third parties

You can use this form to report a possible violation of data protection regulations if you are not personally affected or wish to remain anonymous.

Note: The FDPIC shall open an investigation into a federal body or a private person ex officio or in response to a report if there are sufficient indications that a data processing activity could violate data protection regulations.

You should use this form if:

• You are not a data subject and your data is therefore not affected by the data processing you are reporting;
• You wish to remain anonymous, whether you are a data subject or not.

If you have not already done so, please read the conditions and limitations of an FDPIC intervention:

If you are submitting the report as an ethical hacker, you should consult our Factsheet for ethical hackers.

How will the FDPIC handle your report?

• Based on the information provided in your report, we will analyse whether there appears to be a significant violation of data protection regulations, whether intervention by the FDPIC is justified, and if so, what form this should take. If necessary, and provided you have given us your contact details, you may ask you to send us supporting documents or further information.
• Before opening a formal investigation as set out in Article 49 of the Data Protection Act, the FDPIC may contact the data controller to remind them of their obligations and give formal notice that they must comply with the law (a low-threshold intervention) or to ask them to give their response and answer any unresolved questions. This especially applies in simple cases or when clarifications are required.
• As a third party, you will not be informed of any action taken in response to your report and, in particular, if an investigation is opened. If you are a data subject and wish to be informed of future developments, you should use the Form for reporting data protection violations (for data subjects). Please note that you cannot submit an anonymous report in this case.

Form to report data protection violation for third parties

Please complete the form in full. If you wish to send us additional documents, you can do so in the next step, after you have received our confirmation message.