Personal Data Notice Template for Switzerland

A Personal Data Notice is a legally required transparency document that informs individuals about how your organization collects, processes, and protects their personal data under Swiss law. Following the revised Federal Act on Data Protection (FADP/DSG) that came into effect in September 2023, you must provide clear and comprehensive information about your data processing activities to comply with Swiss data protection obligations.

When do you need this document?

You need a Personal Data Notice whenever you process personal data of individuals in Switzerland, regardless of where your organization is based. This applies when collecting customer information through websites, mobile apps, or physical forms, processing employee data for HR purposes, handling patient records in healthcare settings, or conducting marketing activities that involve personal data. The notice is also essential when engaging with third-party processors, transferring data internationally, or operating in regulated industries where data protection compliance is critical. Any organization that collects names, email addresses, phone numbers, or other identifying information must provide this notice to meet legal transparency requirements.

Key legal considerations

Your Personal Data Notice must clearly identify you as the data controller and provide contact details for your Data Protection Officer if appointed. The document should specify the categories of personal data you collect, the purposes for processing, and the legal basis under the FADP for each processing activity. You must explain data retention periods, describe any automated decision-making processes, and outline data subject rights including access, rectification, deletion, and data portability. The notice should address data sharing with third parties, international transfers, and security measures implemented to protect personal data. Particular attention must be paid to sensitive data processing, which requires explicit consent or other valid legal grounds under Swiss law.

Legal requirements in Switzerland

Under the FADP 2023, you must provide data protection information in a concise, transparent, and easily accessible manner using clear language. The notice must be available at the point of data collection or provided within a reasonable timeframe when data is obtained from third parties. For cross-border data transfers, you must specify destination countries and explain adequacy decisions or appropriate safeguards in place. The document must comply with the FADP Ordinance requirements for specific processing situations and align with Swiss Civil Code personality rights protections. You should also consider cantonal data protection laws that may impose additional requirements for certain sectors or activities, and ensure your notice addresses any contractual obligations under the Swiss Code of Obligations when processing involves commercial relationships.