Your Jurisdiction at a Glance — Switzerland
Federal Act on Data Protection (FADP / nDSG), revised version in force since 1 September 2023
Authority: Federal Data Protection and Information Commissioner (FDPIC / EDÖB)
- Data breach notification to the FDPIC as soon as possible if there is a high risk
- Records of processing activities (companies with fewer than 250 employees are exempt unless the risk is high)
- Data protection impact assessment for high-risk processing
- Data protection advisor is optional
- Task 2 of this workshop: document Switzerland in the data protection scope document, together with sector rules and other countries you operate in
- Workshop 2: governance, roles and the data protection officer
- Workshop 3: records of processing activities
- Workshop 8 and 9: risk assessment and security measures
- Workshop 10: vendors, processors and international transfers
- Workshop 11: data breaches and notification deadlines