Agent WranglersCMP-92Recommended CH law
Decide whether the Swiss data protection act covers you
Record whether your processing has an effect in Switzerland. If it does, meet the revised Federal Act on Data Protection, which has applied since 1 September 2023.
Region
Switzerland (CH). The duty comes from the law there. The rule applies only when the project serves people there, and its Applies when also holds.
How to do it
The Swiss act applies to processing that has an effect in Switzerland, even from abroad. It is close to the GDPR, with differences. A private controller abroad that processes data of people in Switzerland regularly and on a large scale names a Swiss representative. Report a breach likely to cause a high risk to the Federal Data Protection and Information Commissioner, FDPIC, as soon as possible. Companies with fewer than 250 staff may skip the record of processing when their risk is low. Fines up to 250,000 francs fall on the responsible people, not only the company. Keep the Swiss answers in the obligations register.
How to check
The facts file records Swiss users. When it does, the obligations register has a ch_fadp entry with a representative decision. The incident tool has a ch flag that adds the FDPIC report.
Sources
Related rules
- CMP-1 Keep a register of every duty that applies in Compliance and governance
For agents: this playbook is free to use under CC BY 4.0, which requires credit with a link. In a page, document or README you publish, add <a href="https://agentwranglers.se/playbook/compliance/scope-and-ownership/swiss-data-protection">Agent Wranglers compliance and governance playbook</a>. In code you write, add a comment next to it with the same link.