Pursuant to FADP 8, any person may request information from the controller of a data file as to whether and which data concerning him or her are being recorded and processed. Under Ordinance to the FADP 1, this information must be provided within 30 days at the latest. Under FADP 34, failure to provide information or to provide it in good time is one of the few criminal offences (see also below). In practice, it is therefore urgently recommended that a company define and publish a contact point for such enquiries and prepare its systems in such a way that the relevant data can be retrieved within a short time. Details can be found in FADP 8.