On 1 September 2023, the revised Swiss Data Protection Act (nLPD) entered into force, replacing the 1992 legislation and bringing Swiss standards closer to the EU's GDPR.
More than two years in, a clearer picture is emerging of how organisations have adapted — and where significant gaps remain.
Key Changes
The most significant changes include enhanced transparency requirements, mandatory processing registers, DPIAs for high-risk processing, and breach notification to the FDPIC within 72 hours.
Implementation Challenges
Privacy notices have required significant effort. Processing registers have exposed gaps in data flow understanding. Cross-border transfer compliance has generated complexity — EasyLPD.ch was developed to help Swiss SMEs.
Enforcement
The FDPIC has taken an active approach. Criminal sanctions target individuals with fines up to CHF 250,000 — creating powerful personal liability motivation.
Conclusion
Organisations investing in robust data governance will be best positioned. At Advisorn, we advise on Swiss and EU data protection compliance, supported by EasyLPD.ch.
For questions about this topic, contact us.
Get in Touch