According to Art. 25 FADP, any person may request information from the owner of a data collection as to whether and which data about them is being collected and processed. According to Art. 25 FADP, this information must be provided within 30 days at the latest. According to Art. 60 DSG, failure to provide information or failure to provide it in a timely manner is punishable by law (!). In practice, it is therefore strongly recommended that a contact point for such enquiries be defined and publicised within a company and that the systems be prepared in such a way that the relevant data can be retrieved within a short period of time. Details can be found in Art. 25 FADP. The right to information under Art. 25 FADP cannot be waived in advance.