1 The INDEX FIS information system is used:
- a.
- to establish whether the FIS is processing data relating to a person, an organisation, a group, an object or an event;
- b.
- to store reports prepared by the cantonal executive authorities;
- c.
- to process data from preliminary investigations carried out by the cantonal executive authorities.
2 It enables authorities that are not connected to the specially secured FIS network to access data that they need to fulfil their statutory tasks, and the secure transmission of such data.
3 It contains:
- a.
- data for the identification of the persons, organisations, groups, objects and events recorded in the IASA FIS and IASA-GEX FIS information systems;
- b.
- the reports prepared by the cantonal executive authorities independently or on behalf of the FIS;
- c.
- data from preliminary investigations carried out by the cantonal executive authorities.
4 The following persons have online access to the following data in INDEX FIS:
- a.
- FIS employees have access to the data in paragraph 3 letters a and b, provided they have the task of ensuring the early recognition and prevention of threats to Switzerland and its population;
- b.
- employees of the cantonal executive authorities in order to carry out their tasks in terms of this Act and to process and pass on their data from preliminary investigations and their reports to the FIS and to other cantonal executive authorities; only employees of the cantonal executive authority that carried out the preliminary investigations and the employees of the FIS quality assurance service have access to data in accordance with paragraph 3 letter c;
- c.
- employees of the Federal Office of Police have access to the data in accordance with paragraph 3 letter a in order to conduct security-related, criminal investigation and administrative-policing tasks and to assess allegations of money laundering and terrorism financing contained in reports from Swiss financial institutions;
- d.
- the employees of the DDPS Information Security and Facility Protection Unit have access to the data in accordance with paragraph 3 letter a in order to carry out personnel security screening procedures.