The manufacturers of data processing systems or programs and controllers and processors may have their systems, products and services evaluated by recognised independent certification bodies.

The Federal Council shall issue regulations on the recognition of certification procedures and the introduction of a data protection quality mark. In doing so, it shall take account of international law and the internationally recognised technical standards.