1. Data Transfer Mechanisms: Required when personal data will be transferred outside Switzerland, specifying approved transfer mechanisms

2. Audit Rights: Optional section granting audit rights to the disclosing party, typically included in high-security situations

3. Subprocessing: Required when the receiving party may engage subcontractors to process data

4. Insurance Requirements: Optional section specifying required insurance coverage for data protection and cybersecurity risks

5. Data Breach Notification: Detailed procedures for handling data breaches, recommended for high-risk data processing

6. Intellectual Property Rights: Required when confidential information includes IP or when IP might be created during the relationship

7. Employee and Contractor Obligations: Detailed requirements for ensuring compliance by staff, recommended for complex organizational relationships

1. Schedule 1 - Categories of Confidential Information: Detailed list of types of confidential information covered

2. Schedule 2 - Technical and Organizational Measures: Specific security measures required for data protection

3. Schedule 3 - Authorized Recipients: List of authorized persons or categories of persons who may access the confidential information

4. Schedule 4 - Data Processing Details: Details of personal data processing activities including categories of data subjects, types of data, and processing purposes

5. Schedule 5 - Contact Details: Key contacts for confidentiality and data protection matters

6. Appendix A - Standard Contractual Clauses: If required for international data transfers, incorporating approved model clauses