#
Robust bidirectional adequacy status (EU since 2000; UK full adequacy) plus a GDPR-mirroring transfer-mechanism toolkit.
Sub-modules (6)
Transfer MechanismsGreen
Available mechanisms include adequacy, SCCs and BCRs under Art 16 revFADP, and derogations under Art 17 (consent, contract necessity, overriding public interest, public availability of data).
Claims (1):
- Cross-border transfers from Switzerland may rely on adequacy, Standard Contractual Clauses or Binding Corporate Rules under Article 16 of the revised FADP, or derogations under Article 17 including consent, contractual necessity, overriding public interest, or public availability of the data.
Adequacy ReceivedGreen
Switzerland has held an EU adequacy decision since 2000 (Commission Decision 2000/518/EC) and is listed by the UK government as a 'full adequacy' jurisdiction for restricted transfers.
Claims (2):
- Switzerland is considered by the European Commission as providing an adequate level of data protection, per Commission Decision 2000/518/EC of 26 July 2000, and remains on the Commission's current list of adequate countries.
- The UK government's adequacy regulations list Switzerland among the jurisdictions with 'full adequacy' for restricted transfers under UK GDPR.
Adequacy GrantedGreen
The FDPIC maintains its own list of third countries considered to provide adequate protection for outbound Swiss data transfers.
Claims (1):
- The FDPIC establishes and maintains its own list of third countries considered to provide an adequate level of protection for personal data transferred from Switzerland.
Sccs And BcrsAmber
The FDPIC has issued and periodically updated guidance/templates on Standard Contractual Clauses for use by Swiss controllers.
Claims (1):
- The FDPIC has updated its guidelines/templates concerning Standard Contractual Clauses available for use by Swiss data exporters.
Transfer Impact AssessmentRed
No FDPIC-specific formal Transfer Impact Assessment obligation equivalent to post-Schrems II EU practice was confirmed in this research pass, though FDPIC guidance on third-country transfers exists generally.
Absence provenance: unavailable. Searched: FDPIC transfer impact assessment guidance third country.
Data LocalisationRed
No general private-sector data-localisation mandate was confirmed for Switzerland in this research pass.
Absence provenance: unavailable. Searched: Switzerland data localisation requirement FADP, Swiss data residency mandate.
no periodic updates on record for this sub-brief
Sources and claims (5)
- ProbableOneTrust DataGuidance — Cross-border transfers from Switzerland may rely on adequacy, Standard Contractual Clauses or Binding Corporate Rules under Article 16 of the revised FADP, or derogations under Article 17 including consent, contractual necessity, overriding public interest, or public availability of the data.observed
- ConfirmedEUR-Lex / Official Journal of the European Union — Switzerland is considered by the European Commission as providing an adequate level of data protection, per Commission Decision 2000/518/EC of 26 July 2000, and remains on the Commission's current list of adequate countries.observed
- ConfirmedICO — The UK government's adequacy regulations list Switzerland among the jurisdictions with 'full adequacy' for restricted transfers under UK GDPR.observed
- ProbableOneTrust DataGuidance — The FDPIC establishes and maintains its own list of third countries considered to provide an adequate level of protection for personal data transferred from Switzerland.observed
- UncertainOneTrust DataGuidance — The FDPIC has updated its guidelines/templates concerning Standard Contractual Clauses available for use by Swiss data exporters.observed