FINTECH · DATA PROTECTION · SWISS LAW
Introduction
Switzerland has established itself as one of Europe’s leading hubs for financial innovation, from the “Crypto Valley” around Zug to a dense ecosystem of payment apps, neobanks, lending platforms, robo-advisers, insurtechs and crypto-asset service providers. What every one of these business models has in common is that it is built on the systematic processing of personal data — and, very often, of sensitive financial data. That makes data protection not a back-office formality but a core compliance discipline that shapes the product itself.
Two bodies of law govern FinTech activity in parallel. The first is the revised Federal Act on Data Protection (revFADP; in German the totally revised Datenschutzgesetz, nDSG), in force since 1 September 2023. The second is the sector-specific financial-market regime supervised by the Swiss Financial Market Supervisory Authority (FINMA), layered on top of banking and professional-secrecy