Jurisdiction Guide
Switzerland Privacy & Data Protection Laws
Every regime below can apply to a business handling Switzerland residents' data, depending on whether you have an established presence there, actively offer goods or services to residents, or monitor their behavior. This is a general reference, not a determination for your specific business — run the full questionnaire to see which of these actually apply to you.
Comprehensive Privacy Law · 1
Instead of GDPR's three itemized triggers, Art. 3 uses a broad 'effects doctrine': the Act applies to circumstances that have an effect in Switzerland, even if initiated abroad — official guidance treats this as reaching foreign controllers who offer goods/services to, or monitor, persons in Switzerland, but the statute itself frames it as a general causation test rather than discrete triggers. Exemptions are narrow: purely personal/household use, parliamentary deliberations, and diplomatic-immunity institutional beneficiaries — there is no general nonprofit, government, small-business, or health/financial exemption; federal bodies are themselves covered.