Switzerland’s FADP, covered with the GDPR.
The revised FADP applies to anything with an effect in Switzerland, and its fines target the people responsible. Serve Switzerland in Privacyboard: your policy gains a Swiss notice and the 30-day deadline.
Free to set up · No credit card · Checked 12 November 2026
In short
- Applies to
- Processing with an effect in Switzerland
- Maximum fine
- CHF 250,000, on the responsible person
- Deadline
- 30 days per access request
- In Privacyboard
- On every plan, Free included
What the FADP asks, and where it lives
Pick a duty to see the screen that handles it.
What the law asks
Purposes, recipients, transfers abroad and rights.
In Privacyboard
A Swiss section added to your policy from your records.
Every plan
Show all 5 duties as a list
Art. 19A notice for SwitzerlandEvery plan
What the law asks: Purposes, recipients, transfers abroad and rights.
In Privacyboard: A Swiss section added to your policy from your records.
Art. 25Answer access within 30 daysEvery plan
What the law asks: 30 days, extendable if you tell the person.
In Privacyboard: Switzerland in the request form, with its deadline. Request form on Pro.
Art. 24Report serious breachesEvery plan
What the law asks: Notify the FDPIC as quickly as possible when the risk is high.
In Privacyboard: The breach register names the FDPIC.
Art. 14A Swiss representative, sometimesEvery plan
What the law asks: Only for large-scale, regular, high-risk processing from abroad.
In Privacyboard: Your Swiss representative shown in your policy if you have one.
CookiesConsent like in the EUEvery plan
What the law asks: Switzerland is treated with the European zone.
In Privacyboard: Visitors in Switzerland are asked for consent.
The numbers to know
the top fine, on the person responsible
to answer an access request
below which most companies need no record of processing
The company itself can be fined up to CHF 50,000 when finding the responsible person would be disproportionate.
What Privacyboard covers, and what it does not
Covered
- A Swiss notice in your policy
- Switzerland in the request form, 30 days
- The FDPIC in the breach register
- Your Swiss representative published
- Consent for visitors in Switzerland
Not covered
- Deciding whether you need a Swiss representative
- Notifying the FDPIC for you
- Translating documents into German, French or Italian
Privacyboard is a guidance tool, not legal advice.
Your first hour
- 1
Add Switzerland
In Company profile, Activity.
- 2
Add a representative
Only if you need one.
- 3
Validate your policy
It now has a Swiss notice.
- 4
Publish your center
Switzerland appears in the form.
Go online for free. Grow when you need to.
Free puts you online. Pro adds requests, monitoring and your team; Business, security questionnaires and only your brand.
Free
$0 forever
No card, no time limit
For getting compliant and going online on your own.
Start for freeKey features:
- Privacy and cookie policies
- Vendor and processing registers
- Requests and breaches tracked
- Impact assessment screening
- AI Act screening
- Privacy center on privacyboard.io
- Cookie banner on 1 domain
- 1 person
- And 1 more on the pricing page
No card needed
ProRecommended
$20 per month
Billed $240 a year Save $48
For founders who want to be compliant in a few clicks and stay that way.
Start with ProEverything in Free, plus:
- DPA for your clients
- Vendor monitoring
- Reminders for documents and reviews
- Request form and replies
- Your own domain
- Banner on 3 domains, every choice logged
- Weekly site scan
- Complete DPIAs and TIAs
- AI assistant connector
- 2 people
- And 1 more on the pricing page
Cancel any time
Business
$109 per month
Billed $1,308 a year Save $240
For the person in charge of privacy: every detail in order, a team with roles, and proof for audits and customers.
Start with BusinessEverything in Pro, plus:
- Up to 50 people, with roles
- PDF and Excel exports
- Signed agreements on vendors
- Activity log kept 3 years
- Security questionnaires answered for you
- No Privacyboard mention
- Center in English and French
- Evidence pack in one click
- Banner on 10 domains, daily scan
- Two-step verification required
- And 3 more on the pricing page
Bank transfer on request
Questions, answered.
Does the FADP apply to companies outside Switzerland?
Yes, to processing that has an effect in Switzerland, even if it starts abroad (Art. 3).
Who gets fined under the FADP?
Mostly the responsible individuals, up to CHF 250,000. The company only up to CHF 50,000, in limited cases.
Can we use US vendors?
Yes. The US is adequate for companies certified under the Swiss-US Data Privacy Framework, since September 2024.
Is GDPR compliance enough?
Largely. The FADP adds its own notice, a 30-day deadline and the FDPIC.
Official sources
Checked on 12 November 2026. Laws and guidance change: read the official text before you rely on a figure.
Read more
Other regulations
GDPR
Records, notices, requests, breaches, DPIAs.
Read moreUK GDPR
UK authority, UK representative, one-month replies.
Read moreInternational data transfers
Adequacy, SCCs, the DPF, transfer assessments.
Read more
Features to start with
Privacy policy
A complete GDPR privacy policy, written from your answers and kept current.
Learn morePrivacy requests
Receive access and erasure requests, track the one-month deadline, reply with ready-made messages.
Learn moreVendor list
Document every tool that handles personal data, prefilled for 1,290+ common tools.
Learn more
