--- title: "Switzerland — Cross-Border & Adequacy | Data Protection Monitor" canonical: https://dataprotection.gi/jurisdictions/switzerland/cross-border-and-adequacy/ source_html: /jurisdictions/switzerland/cross-border-and-adequacy/index.html description: "Switzerland — Cross-Border & Adequacy: cross_border_and_adequacy Cross-Border & Adequacy 6 sub-modules 5 claims Green ▾ # Robust bidirectional adequacy status (EU since 2000; UK full adequacy) plus a GDPR-mirroring tran" generated_at: 2026-10-25T04:46:50Z content_sha256: b925bf236f94f8ea0f73ce07c5f570d2d96934b960a65118617a7851a69e7a96 generator: "fe-fleet/md-twin@1.0" --- # Switzerland — Cross-Border & Adequacy | Data Protection Monitor ### D5Cross-Border & Adequacy6 sub-modules5 claimsGreen▾# Robust bidirectional adequacy status (EU since 2000; UK full adequacy) plus a GDPR-mirroring transfer-mechanism toolkit. Primary framework Federal Act on Data Protection (FADP), revised version, Arts 16-17; EU Commission Decision 2000/518/EC Supervisory authority [Federal Data Protection and Information Commissioner (FDPIC / EDÖB)](http://www.edoeb.admin.ch) Traffic-light rationale — Green Robust bidirectional adequacy status (EU since 2000; UK full adequacy) plus a GDPR-mirroring transfer-mechanism toolkit. #### Sub-modules (6) #### Transfer MechanismsGreen Available mechanisms include adequacy, SCCs and BCRs under Art 16 revFADP, and derogations under Art 17 (consent, contract necessity, overriding public interest, public availability of data). Claims (1): - Cross-border transfers from Switzerland may rely on adequacy, Standard Contractual Clauses or Binding Corporate Rules under Article 16 of the revised FADP, or derogations under Article 17 including consent, contractual necessity, overriding public interest, or public availability of the data. #### Adequacy ReceivedGreen Switzerland has held an EU adequacy decision since 2000 (Commission Decision 2000/518/EC) and is listed by the UK government as a 'full adequacy' jurisdiction for restricted transfers. Claims (2): - Switzerland is considered by the European Commission as providing an adequate level of data protection, per Commission Decision 2000/518/EC of 26 July 2000, and remains on the Commission's current list of adequate countries. - The UK government's adequacy regulations list Switzerland among the jurisdictions with 'full adequacy' for restricted transfers under UK GDPR. #### Adequacy GrantedGreen The FDPIC maintains its own list of third countries considered to provide adequate protection for outbound Swiss data transfers. Claims (1): - The FDPIC establishes and maintains its own list of third countries considered to provide an adequate level of protection for personal data transferred from Switzerland. #### Sccs And BcrsAmber The FDPIC has issued and periodically updated guidance/templates on Standard Contractual Clauses for use by Swiss controllers. Claims (1): - The FDPIC has updated its guidelines/templates concerning Standard Contractual Clauses available for use by Swiss data exporters. #### Transfer Impact AssessmentRed No FDPIC-specific formal Transfer Impact Assessment obligation equivalent to post-Schrems II EU practice was confirmed in this research pass, though FDPIC guidance on third-country transfers exists generally. Absence provenance: unavailable . Searched: FDPIC transfer impact assessment guidance third country. #### Data LocalisationRed No general private-sector data-localisation mandate was confirmed for Switzerland in this research pass. Absence provenance: unavailable . Searched: Switzerland data localisation requirement FADP, Swiss data residency mandate. Category narrative 81 words Switzerland offers multiple cross-border transfer mechanisms mirroring the GDPR: adequacy (its own FDPIC-maintained country list plus reliance on the general adequacy concept), Standard Contractual Clauses and Binding Corporate Rules under Art 16 revFADP, and derogations under Art 17 (consent, contractual necessity, overriding public interest, public availability). Switzerland itself has held an EU adequacy decision since 2000 (2000/518/EC) and is listed by the UK as a 'full adequacy' jurisdiction. Data-localisation mandates in the private sector were not confirmed in this research pass. no periodic updates on record for this sub-brief Evidence 5 Sources and claims (5) - Probable[OneTrust DataGuidance](https://www.dataguidance.com/sites/default/files/switzerland_-_third_country_assessment_guidance_note_dataguidance.pdf) — Cross-border transfers from Switzerland may rely on adequacy, Standard Contractual Clauses or Binding Corporate Rules under Article 16 of the revised FADP, or derogations under Article 17 including consent, contractual necessity, overriding public interest, or public availability of the data.observed 2026-08-03 - Confirmed[EUR-Lex / Official Journal of the European Union](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32000D0518) — Switzerland is considered by the European Commission as providing an adequate level of data protection, per Commission Decision 2000/518/EC of 26 July 2000, and remains on the Commission's current list of adequate countries.observed 2026-08-03 - Confirmed[ICO](https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/international-transfers/adequacy-regulations/is-the-restricted-transfer-covered-by-adequacy-regulations/) — The UK government's adequacy regulations list Switzerland among the jurisdictions with 'full adequacy' for restricted transfers under UK GDPR.observed 2026-08-03 - Probable[OneTrust DataGuidance](https://free.dataguidance.com/laws/switzerland-federal-data-protection-act-draft/) — The FDPIC establishes and maintains its own list of third countries considered to provide an adequate level of protection for personal data transferred from Switzerland.observed 2026-08-03 - Uncertain[OneTrust DataGuidance](https://www.dataguidance.com/news/switzerland-fdpic-updates-sccs-guidelines) — The FDPIC has updated its guidelines/templates concerning Standard Contractual Clauses available for use by Swiss data exporters.observed 2026-08-03