Switzerland. Data localisation / cross-border. Federal Council decision / ordinance amendment

Swiss–US DPFSwiss–US Data Privacy Framework (adequacy recognition via amendment of Annex 1 of the Data Protection Ordinance)

In force

§1Summary

Synopsis

The Federal Council recognised that US organisations certified under the Swiss–US DPF provide adequate protection, enabling transfers without additional safeguards. It mirrors the EU–US DPF and relies on Executive Order 14086 redress.

Key themes
  • adequacy
  • US certification
  • redress
Unique features

Switzerland's first partial adequacy finding for the US since the Privacy Shield was invalidated.

SaaS relevance

Swiss customers can transfer data to US SaaS providers certified to the Swiss–US DPF without SCCs.

§2Obligations

Cross-border transfers
Partial adequacy for certified US organisations

§3Dates

Key dates
  • Adopted
  • In force

§4Text and authority

Text
Authority
FDPIC; US Department of Commerce (certification)

§5Where it applies

Domestic law of
Switzerland

§6Sources and verification

Verification

High confidence.