Switzerland

Tier 2 Comprehensive law Europe

Principal framework: Revised FADP (2023). Regulator: FDPIC. Fully revised FADP in force 1 Sep 2023; the FDPIC has no administrative fining power. Holds EU adequacy.

At a glance

Principal law: Revised FADP
Regulator: FDPIC
Breach notification: To the FDPIC as soon as possible where high risk to data subjects
Maximum penalty: Criminal fines up to CHF 250,000 — levied on responsible individuals, not firms
DPO required: Voluntary data protection adviser
Digital consent age: None set
Extraterritorial reach: Yes — effects doctrine (Art 3 FADP)

Structure

Structural pattern: Pattern 3 — uniform private law, devolved public sector
Sub-jurisdictions: 0 (regulator-and-public-sector-only)
ISO code: CH

Transfers and adequacy

EU member: No
EEA member: No
Holds EU adequacy: Yes
Granted: 26 July 2000
Review: Confirmed Jan 2024 review

Switzerland; 1995 Directive (Dec. 2000/518/EC).

Instruments

revFADP (Switzerland)

Tier 2 · comprehensive

Revised Federal Act on Data Protection (revFADP / nFADG), Switzerland

Sources

Never independently verified — seeded from the prototype.