In its ruling A‑4286/2022 of April 20, 2026, the Fede­ral Admi­ni­stra­ti­ve Court lar­ge­ly dis­missed and par­ti­al­ly upheld a com­plaint by the Digi­tal Socie­ty against the Fede­ral Intel­li­gence Ser­vice (FIS):

The focus is on the excep­ti­on to the prin­ci­ple of publi­ci­ty under Art. 67 NDG and the que­sti­on of whe­ther this excep­ti­on also covers unlawful acti­vi­ties, which the FAC affirms.

The start­ing point is a request from the Digi­tal Socie­ty for access to two FIS docu­ments, a pro­ce­s­sing regu­la­ti­on and an ana­ly­sis of the legal basis for a facial reco­gni­ti­on system of the FIS. The FIS had refu­sed access on the basis of Art. 67 NDG.

The FAC inter­prets Art. 67 NDG („The [BGÖ] does not app­ly to access to offi­ci­al docu­ments rela­ting to the pro­cu­re­ment of infor­ma­ti­on under this Law“) far out. The Con­cept of infor­ma­ti­on pro­cu­re­ment covers the pro­cu­re­ment of per­so­nal data, the recor­ding of bio­me­tric cha­rac­te­ri­stics and data com­pa­ri­son on the way to the intel­li­gence pro­duct. Docu­ments who­se con­tent allo­ws con­clu­si­ons to be drawn about the pro­cu­re­ment of infor­ma­ti­on are also exempt from the FSA:

7.4 In sum­ma­ry, the inter­pre­ta­ti­on of Art. 67 NDG shows that it is this is a spe­cial pro­vi­si­on within the mea­ning of Art. 4 let. b BGÖ.that devia­te from the requi­re­ments of the Public Access Act for the pro­vi­des for access to cer­tain information: […]

In addi­ti­on, the con­cept of infor­ma­ti­on pro­cu­re­ment in the appli­ca­ti­onof Art. 67 NDG should be given a broad under­stan­ding; the term inclu­des not only the pro­cu­re­ment of data but also fur­ther data pro­ce­s­sing.to ful­fill the tasks in accordance with Art. 6 NDG. Thefrom the prin­ci­ple of publi­ci­ty also applies to docu­ments who­se incon­clu­si­ons about the pro­cu­re­ment of infor­ma­ti­on by the lower court.pos­si­ble (see judgment of the Fede­ral Supre­me Court 1C_222/2018 of March 21, 2019 E. 4, insesp. E. 4.5).

Howe­ver, Art. 67 NDG does not app­ly to enti­re docu­ments, but to only infor­ma­ti­on with a cer­tain infor­ma­ti­on con­tent out. The FAC exami­nes this sepa­ra­te­ly for both documents:

  • The pro­ce­s­sing regu­la­ti­ons con­tain infor­ma­ti­on on the pur­po­se, mode of ope­ra­ti­on, embed­ding in the system land­scape, pro­ce­s­sed per­so­nal data, access rights, data secu­ri­ty and data pro­tec­tion. As a who­le, it rela­tes to the pro­cu­re­ment of infor­ma­ti­on, which is why access should be denied overall.
  • Ana­ly­sis of the legal basis, point 1 (“Initi­al situa­ti­on”): Again, the FAC denies access becau­se this sec­tion descri­bes ope­ra­tio­nal and tech­ni­cal capa­bi­li­ties in the area of facial recognition.
  • Ana­ly­sis of legal bases, points 2 – 7: This sec­tion con­cerns legal bases, gaps, pro­po­sals, con­se­quen­ces and recom­men­da­ti­ons. No excep­ti­ons app­ly here, which is why access must be gran­ted in this respect.

Art. 67 NDG also applies if the infor­ma­ti­on is obtai­ned unlawful­ly. Howe­ver, the FAC express­ly lea­ves open how a decis­i­on should be made if a mea­su­re “obvious­ly vio­la­tes fun­da­men­tal rights in a bla­tant manner”:

As explai­ned abo­ve, the inter­pre­ta­ti­on of the law has moved away from the idea ofthat it is not the wor­ding alo­ne that con­sti­tu­tes the norm, but that theThe law is only under­s­tood and con­cre­ti­zed in terms of facts. Thus the Fede­ral Admi­ni­stra­ti­ve Court in its judgment A‑6444/2020 of Novem­ber 19, 2025, con­clu­ded that the radio and cable recon­nais­sance as mea­su­res for the pro­cu­re­ment of infor­ma­ti­on are not suf­fi­ci­ent­ly pro­vi­de pro­tec­tion against misu­se and faci­li­ta­te the pro­cu­re­ment of infor­ma­ti­on insois lar­ge­ly unlawful. If the scope of appli­ca­ti­on of Art. 67 NDG in accordance with the opi­ni­on of the com­plainant on lawful Infor­ma­ti­on pro­cu­re­ment limi­t­ed, would have to be a con­se­quence of the judgment of Novem­ber 19, 2025, access to all docu­ments rela­ting to the radio and cable recon­nais­sance, even though the defi­ci­en­ci­es are known. and can in prin­ci­ple be reme­di­ed by the legis­la­tor (cf.of the Fede­ral Admi­ni­stra­ti­ve Court A‑6444/2020 of Novem­ber 19, 2025, E. 25, insesp. E. 25.4; cf. dif­fer­ent­ly in the mate­ri­al scope of appli­ca­ti­on of the Öffent­lichthe ruling of the Fede­ral Admi­ni­stra­ti­ve Court A‑683/2016 of Octo­ber 20, 2016 E. 7.1.3, accor­ding to which the public inte­rest in inter­na­tio­nal rela­ti­onsSwitz­er­land in the event of a «con­sti­tu­tio­nal­ly que­stionable» offi­ci­al action.not to be regard­ed as wort­hy of pro­tec­tion in prac­ti­ce and the­r­e­fo­re an excep­ti­on from the prin­ci­ple of publi­ci­ty within the mea­ning of Art. 7 para. 1 let. d BGÖ.was justi­fi­ed). Such a result would have been com­pa­ti­ble with the Art. 67 NDG is not com­pa­ti­ble with the legislator’s assess­ment. […]. Whe­ther this also applies in the event that a masThe use of the infor­ma­ti­on pro­cu­re­ment system is obvious­ly bla­tant­ly elecmen­ta­ry fun­da­men­tal rights need not be asses­sed here […].

The FAC lea­ves the Que­sti­on of the lega­li­ty of the pro­ce­s­sing of bio­me­tric data by the FIS open, but has con­sidera­ble doubts:

  • The recor­ding of bio­me­tric cha­rac­te­ri­stics and the com­pa­ri­son with exi­sting data­ba­ses each con­sti­tu­te inde­pen­dent data pro­ce­s­sing that serious­ly impairs the right to infor­ma­tio­nal self-deter­mi­na­ti­on (Art. 13 para. 2 BV) and the right to pri­va­cy (Art. 8 ECHR).
  • A suf­fi­ci­ent­ly spe­ci­fic basis in a for­mal law is the­r­e­fo­re requi­red, which must also appro­pria­te­ly limit the rea­son for and scope of the data com­pa­ri­son and the dura­ti­on of the pro­ce­s­sing and pro­vi­de for inde­pen­dent monitoring.
  • Art. 44 para. 1 NDG per­mits the pro­ce­s­sing of par­ti­cu­lar­ly sen­si­ti­ve per­so­nal data, and Annex 1 VIS-NDB men­ti­ons pho­to­graphs. Howe­ver, pho­tos in them­sel­ves are not bio­me­tric data, which is why the aut­ho­rizati­on to pro­cess pho­tos does not imply aut­ho­rizati­on to pro­cess bio­me­tric data.
  • The­re is no basis for bio­me­tric pro­ce­du­res com­pa­ra­ble to Art. 3 para. 7 VIS-NDB (OCR technology).