What is the Swiss Federal Act on Data Protection?

The Swiss Federal Act on Data Protection, or FADP, regulates the processing of personal data by private persons and federal bodies. It protects individuals’ privacy and fundamental rights when their information is used.

The fully revised FADP entered into force on 1 September 2023, replacing the previous federal law.

For organisations within its scope, relevant responsibilities include transparent processing, proportionate data collection, appropriate security and respect for individual rights. The law also addresses privacy by design, international disclosures and assessments of processing likely to create high risks.

Website tracking requires a specific assessment. Swiss cookie requirements involve both the FADP and telecommunications legislation; they should not be assumed to match EU consent rules in every situation.

The FDPIC’s official cookie and tracking guidelines, revised on 6 October 2025, explain the relevant distinctions.

For Swiss website privacy compliance, assess the information collected, the extent of profiling and the choices offered to visitors. A Swiss business may also need to meet 2 where its activities fall within the GDPR’s territorial scope.