Data Protection & Cybersecurity In Switzerland 2026: A Country Comparative Guide

Please provide an overview of the legal and regulatory framework governing data protection, privacy and cybersecurity in your jurisdiction (e.g., a summary of the key laws; who is covered; what sectors, activities or data do they regulate; and who enforces the relevant laws).

In Switzerland, data protection is primarily governed by the Swiss Federal Act on Data Protection of 25 September 2020 (Data Protection Act, FADP), together with the Swiss Federal Ordinance on Data Protection of 31 August 2022 (Data Protection Ordinance, FODP), both effective since 1 September 2023. Although the FADP is aligned with the EU GDPR in many respects, it has not simply adopted its provisions on a one-to-one basis. Organisations operating in both the EU and Switzerland must therefore remain mindful of the specific features of Swiss data protection law.