Consent Personal Information Form Template for Switzerland

When your organization collects personal information from individuals in Switzerland, you need a properly structured consent form to comply with Swiss data protection laws. The Consent Personal Information Form serves as your legal foundation for data processing activities, ensuring transparency and protecting both your organization and the individuals whose data you handle.

When do you need this document?

You require a Consent Personal Information Form whenever you collect personal data that goes beyond what individuals might reasonably expect in your business relationship. This includes situations where you're gathering sensitive personal data such as health information, biometric data, or data about political opinions. The form is also mandatory when you plan to share personal data with third parties, use it for marketing purposes beyond your primary business relationship, or transfer data internationally. If you're processing data of minors under 16, you'll need consent from their parents or guardians. Additionally, any organization implementing new data processing activities or updating existing privacy practices must obtain fresh consent using an updated form.

Key legal considerations

Your consent form must meet strict legal standards to be valid under Swiss law. The consent must be freely given, specific, informed, and unambiguous, meaning you cannot bundle consent with other terms and conditions or use pre-ticked boxes. You must clearly explain what personal data you're collecting, why you're collecting it, how long you'll retain it, and who else might access it. The form should outline data subject rights, including the right to withdraw consent, access their data, request corrections, and have data deleted. If you're transferring data to countries outside Switzerland or the EU, you must explain the safeguards in place. Remember that consent can be withdrawn at any time, so you need systems to handle withdrawal requests promptly.

Legal requirements in Switzerland

Under the revised Federal Data Protection Act (revFADP/nDSG), which took effect in September 2023, Switzerland has aligned its data protection standards more closely with GDPR requirements. Your consent form must include your organization's complete contact details, including a designated data protection officer if required. You must specify the legal basis for processing and provide information about automated decision-making if applicable. For cross-border data transfers, you need to demonstrate adequate protection levels or implement appropriate safeguards. The form must be written in clear, plain language that the average person can understand, avoiding legal jargon. Swiss law also requires that you maintain records of consent, including when and how it was obtained, so your form should include tracking mechanisms. If your organization also deals with EU residents, ensure your form meets both Swiss and GDPR requirements to avoid dual compliance issues.