---
title: "Switzerland — Regulator &amp; Framework | Data Protection Monitor"
canonical: https://dataprotection.gi/jurisdictions/switzerland/regulator-and-framework/
source_html: /jurisdictions/switzerland/regulator-and-framework/index.html
description: "Switzerland — Regulator &amp; Framework: regulator_and_framework Regulator &amp;amp; Framework 5 sub-modules 5 claims Green &amp;#9662; # A comprehensive, currently-in-force omnibus statute with an active, empowered supervisory authority;"
generated_at: 2026-10-25T04:46:50Z
content_sha256: 717dd5710c3f4b757b8044082e01eb0de5ca09e4aef100a5576d60deaaeeb837
generator: "fe-fleet/md-twin@1.0"
---
# Switzerland — Regulator &amp; Framework | Data Protection Monitor

### D1Regulator & Framework5 sub-modules5 claimsGreen&#9662;#

A comprehensive, currently-in-force omnibus statute with an active, empowered supervisory authority; GDPR-aligned but not identical.

Primary framework Federal Act on Data Protection (FADP), revised version in force 1 September 2023

Supervisory authority [Federal Data Protection and Information Commissioner (FDPIC / EDÖB)](http://www.edoeb.admin.ch)

Traffic-light rationale &mdash; Green A comprehensive, currently-in-force omnibus statute with an active, empowered supervisory authority; GDPR-aligned but not identical.

#### Sub-modules (5)

#### Regulator And AuthorityGreen

The FDPIC is the federal supervisory authority; cantons additionally maintain their own commissioners for cantonal/communal bodies, creating a partially federated oversight structure alongside the federal regime.

Claims (1):

- The Federal Data Protection and Information Commissioner (FDPIC) is the federal data protection authority responsible for supervising the FADP.

#### Act And InstrumentsGreen

The revFADP and its Ordinance constitute the primary instruments, in force since 1 September 2023, replacing the 1992 FADP and bringing Swiss law closer to GDPR standards.

Claims (1):

- The revised Swiss Federal Act on Data Protection came into force on 1 September 2023, bringing Switzerland&#x27;s data protection regime into closer alignment with the EU GDPR.

#### Material ScopeGreen

The FADP applies as an omnibus law to processing of personal data by private persons and federal bodies irrespective of sector; cantonal acts govern cantonal/communal bodies separately.

Claims (1):

- The FADP is an omnibus law applying to any processing of personal data by private persons and federal bodies, irrespective of sector, while cantonal acts separately govern cantonal and communal bodies.

#### Territorial ScopeGreen

The revFADP&#x27;s territorial scope was broadened, GDPR-style, to capture processing with an effect in Switzerland even if the processing activity is initiated from abroad.

Claims (1):

- The revFADP applies to circumstances that have an effect in Switzerland even where the processing activity is initiated abroad, giving the FDPIC competence over any activity with Swiss impact regardless of origin.

#### Regulator Registration And FilingAmber

There is no general controller-registration/filing regime; instead, non-Swiss controllers meeting territorial-scope criteria must designate and publish a Swiss representative, who is responsible for maintaining the controller&#x27;s records of processing and producing them to the FDPIC on request.

Claims (1):

- Where the revFADP&#x27;s extraterritorial scope applies, the controller must appoint and publicly identify a Swiss representative, who is responsible for maintaining the controller&#x27;s record of processing activities and providing it to the FDPIC on request.

Category narrative 94 words

Switzerland&#x27;s data protection regime is governed by the revised Federal Act on Data Protection (revFADP, FADP 2020), which entered into force on 1 September 2023 alongside its implementing Ordinance, replacing the 1992 FADP. The regime is enforced by the Federal Data Protection and Information Commissioner (FDPIC/EDÖB), an independent federal authority. The revFADP brings Switzerland into closer alignment with the GDPR while retaining distinctly Swiss features (e.g., no general administrative fining power for the FDPIC, personality-rights-based unlawfulness test). Territorial scope was significantly broadened to reach processing with an effect in Switzerland even where initiated abroad.

no periodic updates on record for this sub-brief

Evidence 5

Sources and claims (5)
- Confirmed[OneTrust DataGuidance](https://free.dataguidance.com/laws/switzerland-federal-data-protection-act-draft/) &mdash; The Federal Data Protection and Information Commissioner (FDPIC) is the federal data protection authority responsible for supervising the FADP.observed 2026-08-03
- Confirmed[International Association of Privacy Professionals](https://iapp.org/news/a/revised-swiss-data-protection-law-soon-in-effect-with-new-scope-obligations-implications) &mdash; The revised Swiss Federal Act on Data Protection came into force on 1 September 2023, bringing Switzerland&#x27;s data protection regime into closer alignment with the EU GDPR.observed 2026-08-03
- Confirmed[International Association of Privacy Professionals](https://iapp.org/news/a/revised-swiss-data-protection-law-soon-in-effect-with-new-scope-obligations-implications) &mdash; The revFADP applies to circumstances that have an effect in Switzerland even where the processing activity is initiated abroad, giving the FDPIC competence over any activity with Swiss impact regardless of origin.observed 2026-08-03
- Probable[International Association of Privacy Professionals](https://iapp.org/news/a/revised-swiss-data-protection-law-soon-in-effect-with-new-scope-obligations-implications) &mdash; Where the revFADP&#x27;s extraterritorial scope applies, the controller must appoint and publicly identify a Swiss representative, who is responsible for maintaining the controller&#x27;s record of processing activities and providing it to the FDPIC on request.observed 2026-08-03
- Probable[OneTrust DataGuidance](https://free.dataguidance.com/laws/switzerland-federal-data-protection-act-draft/) &mdash; The FADP is an omnibus law applying to any processing of personal data by private persons and federal bodies, irrespective of sector, while cantonal acts separately govern cantonal and communal bodies.observed 2026-08-03
