These explanations are addressed to persons who conduct research privately or for a federal body, and to federal bodies that conduct research themselves, commission third parties to do so, or forward personal data to researchers. They do not apply to public bodies of the cantons and municipalities, such as universities (with the exception of the ETH), cantonal, university, regional and municipal hospitals. These fall under the jurisdiction of the cantonal and municipal data protection authorities.