{"id":12967,"date":"2023-08-30T00:00:00","date_gmt":"2023-08-30T00:00:00","guid":{"rendered":"https:\/\/e-dialog.group\/blog\/the-new-data-protection-law-in-switzerland-from-september-1st-2023-8211-what-you-need-to-look-out-for\/"},"modified":"2026-02-26T13:38:34","modified_gmt":"2026-02-26T13:38:34","slug":"the-new-data-protection-law-in-switzerland-from-september-1st-2023-8211-what-you-need-to-look-out-for","status":"publish","type":"post","link":"https:\/\/e-dialog.group\/en\/blog\/the-new-data-protection-law-in-switzerland-from-september-1st-2023-8211-what-you-need-to-look-out-for\/","title":{"rendered":"The New Data Protection Law In Switzerland From September 1st 2023 8211 What You Need To Look Out For"},"content":{"rendered":"

This article provides an overview of the most important changes brought about by the new Swiss data protection law for companies. In addition to a quick overview, we have oneChecklist for companies<\/a>put together simply for youdownload<\/a>can.<\/p>

The most important changes at a glance<\/h2>

The new data protection law will bring significant changes for Swiss companies as of September 1, 2023. In the following list we provide an overview of what needs to be taken into account in order to position your company securely.<\/p>

  1. The new data protection law only takes data into accountnatural persons<\/strong>, those of legal entities are excluded.<\/li>
  2. They are now also considered particularly worthy of protectiongenetic<\/strong>andbiometric<\/strong>Data<\/strong>and are therefore taken into account in the new data protection law.<\/li>
  3. duties to “Privacy by design<\/strong>” and “Privacy by default<\/strong>” is also taken from the GDPR and means that the person responsible not only has to comply with the data protection regulations and the principles of data processing, but also has to ensure that the processing of personal data is reduced to a minimum by means of suitable technical defaults.<\/li>
  4. If there are risks relating to the personality or fundamental rights of data subjects during data processing,Impact assessments<\/strong>be realized.<\/li>
  5. TheObligation to provide information<\/strong>becomes more extensive: Whenever personal data is acquired, the person concerned must be informed in advance. This means that it is no longer just the so-called particularly sensitive data that is affected.<\/li>
  6. ADirectory of processing activities<\/strong>is now mandatory, both for the person responsible and for the person processing the order. The minimum content is listed in the law. An exception applies to SMEs (less than 250 employees), whose data processing poses less risk of personal injury to the data subjects. Large companies are no longer exempt from this directory requirement.<\/li>
  7. If there is oneInjury<\/strong>against theData security<\/strong>(Data Breach) a quick report is necessary. The Federal Data Protection and Information Commissioner (FDPIC) must be informed in this regard.<\/li>
  8. The termProfiling<\/strong>, which refers to the automated processing of personal data, is a new part of the law. In this case, those affected must be informed and, in the case of high-risk profiling, consent must even be obtained.<\/li><\/ol>

    Are you already prepared for the new data protection law in Switzerland?<\/strong><\/h4>

    In this webinar, our digital business consultants Sandra Wojciechowska and Lisa Weichselbaum explain what advertisers in Switzerland need to consider from now on<\/p>


    Find out more now
    <\/a><\/p>

    The main differences between nDSG and GDPR<\/h2>

    The new Swiss DSG is to be understood as an approach to the GDPR. But the new GDPR is not an “imitation” of the GDPR. There are also differences between the two legal acts, namely:<\/p>