Switzerland. Comprehensive data protection. Ordinance
DPO / DSVOrdinance on Data Protection of 31 August 2022 (Datenschutzverordnung, DSV / OPDo)
In force
§1Summary
- Synopsis
Implements the FADP with detailed rules on data security, breach notification content, records of processing exemptions, logging, and the list of countries with adequate protection (Annex 1).
- Key themes
- Unique features
Exempts businesses under 250 employees from records of processing unless processing is high-risk; Annex 1 is Switzerland's own adequacy list.
- SaaS relevance
Sets the practical security and documentation requirements a SaaS provider must meet under the FADP.
§2Obligations
- Extraterritorial
- Yes
- Breach notification
- Specifies notification content
- DPO
- No
- Cross-border transfers
- Annex 1 adequacy list
- Maximum penalty
- See FADP
§3Dates
- Key dates
- Adopted
- In force
- Annex 1 amended effective 2024-09-15 to add the United States (certified DPF organisations)
§4Text and authority
- Text
- Authoritative text fedlex.admin.ch
- English text fedlex.admin.ch
- Authority
- Federal Data Protection and Information Commissioner (FDPIC / EDÖB)
§5Where it applies
- Domestic law of
- Switzerland
§6Sources and verification
- Sources consulted
- Verification
High confidence.