As widely known, the revised Swiss Federal Data Protection Act
(revFADP") will enter into force on 1 September 2023, and
there will be no grace period. As a result, if you or your
organisation process personal data in Switzerland, you have five
months to implement the new requirements in your organisation.
Swiss organisations are at different stages of implementing the
new requirements. If your organisation has done little to nothing
to date, this briefing will guide you on what you really should do
now.
PERFORM DATA MAPPING & GAP ANALYSIS
As a starting point, you should review all your data processing
activities and, if necessary, perform a comprehensive data mapping
exercise with your teams or departments and carry out a gap
analysis.