1
The Federal Council shall enact provisions for the implementation of this Act. In particular, it shall determine:
a.
the specifics of the declaration procedure (art. 10);
b.25
the list of particularly sensitive personal data and the categories of data to be processed under Article 28, as well as their retention periods;
c.
the required terms and conditions of contracts by a federal authority for the services of a company.
2
It shall appoint the competent authority.