Medical privacy in Swiss private treatment depends on understanding which organizations hold information, who can receive it, and how permissions are recorded. A private residence does not necessarily mean one record system or one provider. Independent clinicians, laboratories, hospitals, and billing services may each have a role.
Before admission, ask for a clear explanation of the clinical record, consent process, communication channels, and patient-access procedure. The aim is an arrangement the patient can understand and use, including when they want to change a permission or continue care elsewhere.
Identify the organizations involved
Ask which legal provider delivers the residential service and which clinicians or institutions act independently. A shared brand or referral relationship does not necessarily establish a single medical record.
For each service, identify the contact responsible for records and privacy questions. The patient should not have to work out which organization holds a report after treatment has ended.
Include outside specialists and diagnostic providers in the discussion. They may use their own consent forms, patient portals, and record-retention policies.
A short provider list can make the structure easier to follow without exposing clinical detail to every person helping arrange the stay.
Separate clinical records from administrative information
The Swiss data-protection authority describes patient records as including reports, laboratory results, correspondence, and other material created in connection with treatment. Administrative information may also reveal that someone is receiving care.
| Information | Question to ask |
|---|---|
| Assessment and treatment notes | Which clinician holds the record and which treating professionals can access relevant information? |
| Laboratory or imaging reports | Who orders the investigation, receives the result, and explains the finding? |
| Invoices | Which details are included and who is authorized to receive them? |
| Appointment reminders | Which device, address, calendar, or account receives the message? |
| Travel and residence details | What do drivers, assistants, and household staff need for their actual task? |
| Discharge information | Which receiving clinician gets the summary and how does the patient obtain a copy? |
The table helps distinguish purposes. It should not become a reason to share all categories with everyone who appears on the coordination list.
Ask how professional secrecy applies
Swiss FOPH guidance explains that healthcare professionals are generally bound by professional secrecy and that disclosure to third parties normally requires permission or another applicable basis. It also describes information sharing between professionals involved in treatment.
Ask the clinical team to explain those principles in the context of the actual care arrangement. The patient should understand which information is needed for treatment and how relevant exceptions are handled.
A promise that information can never be shared under any circumstance is not a reliable explanation. Request understandable limits rather than an absolute marketing assurance.
Ask who answers questions if the patient is unsure whether a proposed disclosure is necessary or within the permission already given.
Make third-party permissions specific
Identify each person who may receive information and the purpose. A relative, assistant, employer, insurer, and family office may have different roles.
Specify the information category, recipient, communication channel, and any relevant time period. The service should explain how it records and verifies the permission.
The guide to family consent scope helps distinguish practical updates from clinical detail. Paying for treatment does not by itself define what the patient wants disclosed.
Ask how a permission is changed and who updates the distribution list. A new instruction should reach the people who actually send reports, reminders, and invoices.
Choose communication channels deliberately
Tell the provider which phone number, email address, postal address, and calendar are appropriate. A work account or shared household device may be convenient but may not provide the privacy the patient expects.
Ask how the provider sends sensitive documents and verifies the recipient. A general inquiry address may not be the intended route for a complete medical file.
Discuss what appears in message subjects and appointment reminders. A patient may prefer a neutral reminder while still requiring full and accurate information in the professional record.
If an assistant handles scheduling, confirm whether they receive only logistical information. The patient should retain a direct route for private clinical communication.
Understand access to the case file
FOPH states that patients are entitled to inspect their record and obtain an explanation, with specified limits such as information concerning others that is protected by confidentiality. Ask the service how to make an access request.
Clarify identification requirements, the format provided, and the contact for questions about missing or unclear material. The patient may want an explanation from a clinician as well as a copy of documents.
If several providers hold records, ask whether separate requests are needed. A residential summary may not include every external specialist’s full report.
Keep the distinction between requesting a copy and asking another professional to receive relevant information. The practical process and recipient verification may differ.
Ask about retention and deletion without assuming a universal rule
The Swiss data-protection authority explains that deletion requests can be limited by professional and legal obligations to keep records. Ending a stay or withdrawing a sharing permission does not necessarily require a clinician to erase the medical file.
Ask each relevant provider for its applicable retention policy and the basis for it. Requirements and justified retention can depend on the record, professional duties, and applicable law.
Avoid relying on a single general number quoted in a sales conversation. The patient should receive the provider’s actual explanation and know whom to contact about a request.
Ask how records are handled if a practice closes, a professional leaves, or the patient needs access years later. A durable contact route matters beyond the residential period.
Clarify corrections and disagreements
If the patient notices an incorrect identifying detail, medication entry, or factual statement, ask the service how to request correction. The process should preserve a reliable clinical record and make the source of changes understandable.
A disagreement with a professional interpretation may require discussion rather than simple deletion. Ask how the patient’s concern can be reviewed and documented through the appropriate process.
Where an updated report has already been shared, ask how relevant recipients are informed of the correction. Otherwise an older version may remain in use by another clinician.
Keep a record of the request and the response through a suitable channel. This helps the patient follow the matter without repeatedly starting the conversation again.
Handle external care and international transfers carefully
Before an outside appointment, ask what information will be sent, who receives it, and how the result returns. The purpose should be clear enough that the patient understands the disclosure.
The guide to consent for record transfers examines the handoff in more detail. An international transfer should be planned through the relevant providers, including their applicable requirements and secure process.
Do not assume that all clinicians can access the same electronic system. Switzerland’s electronic patient record is also distinct from every individual practice’s electronic medical file.
Ask the receiving clinician to confirm receipt of the relevant information. A sent document does not establish that the next professional has reviewed or accepted the associated clinical task.
Review digital features and recordings
Ask whether video sessions, recordings, automated transcription, messaging, or patient portals form part of care. The patient should understand the purpose, consent arrangements, access, and storage of those features.
Discuss alternatives if a particular feature raises a concern. A familiar platform name does not explain how the provider has configured the system or who can see its contents.
Check access after discharge, including whether a temporary portal account expires. The patient should have a usable copy of essential instructions and know how to request records later.
Keep passwords and account access personal unless a formal, appropriate arrangement permits another person’s involvement. Scheduling help should not automatically require sharing a patient’s clinical login.
Leave with a clear privacy contact and handoff
Consider a hypothetical patient whose assistant books appointments while a relative pays invoices. The patient can ask the provider to document those roles separately: scheduling messages to the assistant, agreed financial documents to the payer, and clinical reports to the patient and authorized clinicians.
The service should confirm how that arrangement operates in its actual systems. A note in one admissions record may not control messages sent by an independent laboratory or specialist. Those providers may need their own instructions and permissions.
Review the arrangement when circumstances change. If the assistant stops helping or the payer changes, ask who updates contact details and prevents future messages going to an outdated recipient. The purpose is to make the privacy plan operational across the people and systems involved, rather than leave it as an expectation discussed only once.
Before departure, confirm which documents will go to the patient, the home clinician, and any other authorized recipient. Review the distribution list if permissions have changed during the stay.
Ask who handles a later access request, correction, privacy question, or concern about an unintended disclosure. The answer should identify a real process rather than only a general promise of discretion.
Medical-record privacy works best when the patient understands the providers, information flows, and available choices. Clear consent and communication arrangements support both confidentiality and the transfer of information necessary for continuing care.
Sources and further reading
Found a detail that has changed? Tell the editorial team.