Privacy Notice For Employees Template for Switzerland
Generate a bespoke document
What is a Privacy Notice For Employees?
The Privacy Notice For Employees is a mandatory document under Swiss data protection law, particularly following the implementation of the revised Federal Data Protection Act (FADP/DSG). It serves as a crucial transparency tool, informing employees about how their personal data is processed in the employment context. This document is necessary whenever an organization employs staff in Switzerland and processes their personal data. It must be provided to employees at the time of data collection and updated when processing activities change. The notice encompasses all aspects of employee data processing, from recruitment through to post-employment, and must reflect Swiss legal requirements while potentially considering EU GDPR standards where applicable. Recent regulatory changes and increased focus on data protection make this document essential for compliance and risk management.
Frequently Asked Questions
Is an employee privacy notice legally required under Swiss law?
Yes, under the Swiss Federal Data Protection Act (FADP/DSG), employers must provide a privacy notice to all employees, contractors, and temporary workers when their personal data is first collected. This is a mandatory transparency requirement that must be updated whenever data processing activities change.
Can I be fined for not having an employee privacy notice in Switzerland?
Yes, the Swiss Federal Data Protection Commissioner can impose administrative fines up to CHF 250,000 for failing to provide mandatory transparency information to employees. Additionally, employees may file complaints or seek damages for privacy violations under the FADP.
How is a Swiss employee privacy notice different from a general privacy policy?
An employee privacy notice is specifically tailored to workplace data processing under Swiss employment law and FADP requirements, covering HR data, monitoring, and workplace-specific processing. A general privacy policy typically addresses customer or website visitor data and may not meet the detailed transparency requirements for employee data under Swiss law.
How long does it take to prepare an employee privacy notice for Switzerland?
Creating a comprehensive Swiss employee privacy notice typically takes 1-3 weeks, depending on the complexity of your data processing activities. This includes mapping all employee data collection, reviewing Swiss FADP requirements, and ensuring compliance with workplace-specific processing activities.
Must I update my employee privacy notice when FADP requirements change?
Yes, under Swiss FADP Article 19, you must update and redistribute the privacy notice whenever there are material changes to data processing activities or legal requirements. The revised FADP that came into effect in September 2023 may require updates to existing notices.
Can I use a generic EU GDPR privacy notice template for Swiss employees?
No, while the revised Swiss FADP aligns more closely with GDPR, there are important differences in Swiss law that require a Switzerland-specific notice. Using a generic GDPR template may leave you non-compliant with specific Swiss Federal Data Protection Act requirements and Swiss employment law obligations.
Which employees must receive the privacy notice under Swiss law?
All employees, contractors, temporary workers, and job applicants whose personal data you process must receive the privacy notice under the Swiss FADP. This includes both Swiss residents and foreign workers employed in Switzerland, and the notice must be provided when their data is first collected.
About the Privacy Notice For Employees
A Privacy Notice For Employees is a legal document that transparently communicates to your workforce how their personal data is collected, processed, and protected within your organization. Under Swiss law, you must provide this notice to ensure compliance with data protection regulations and maintain trust with your employees regarding their privacy rights.
When do you need this document?
You need this privacy notice whenever you employ staff in Switzerland and process their personal data. This includes during recruitment when collecting application materials, at the start of employment when gathering onboarding information, and throughout the employment relationship when processing payroll, performance, or health data. The notice must also be provided to temporary workers, contractors, and consultants whose personal data you process. You'll need to update and redistribute the notice whenever you change your data processing activities, implement new HR systems, or modify how employee data is handled.
Key legal considerations
Your privacy notice must clearly identify your organization as the data controller and provide contact details for your data protection officer or responsible person. You need to specify the categories of personal data processed, which may include identification data, contact information, employment history, performance evaluations, and potentially sensitive data like health records. The document must explain your legal basis for processing under Article 6 of the FADP, whether based on contract performance, legitimate interests, or employee consent. You must also detail data retention periods, employee rights including access and correction, and procedures for data subject requests. Cross-border data transfers require specific disclosure about recipient countries and safeguards implemented.
Legal requirements in Switzerland
Swiss Federal Data Protection Act (FADP) requires you to provide clear and comprehensive information about data processing activities at the time of data collection. Article 19 FADP mandates specific information elements including processing purposes, data categories, and recipient details. The Swiss Code of Obligations Article 328b specifically addresses employee data processing, requiring you to process personal data only as necessary for the employment relationship. You must implement appropriate technical and organizational measures under Article 8 FADP to ensure data security. The notice should reference employees' rights under Articles 25-28 FADP, including rights to information, access, rectification, and erasure. If you transfer employee data outside Switzerland, you must comply with Chapter 2 FADP regarding adequate protection levels or implement appropriate safeguards through standard contractual clauses or other approved mechanisms.
GOVERNING LAW
Applicable law
This Privacy Notice For Employees is drafted to comply with Switzerland law. Key legislation includes:
Swiss Federal Data Protection Ordinance (FDPO): Implements the detailed provisions of the FADP, providing specific requirements for data processing, security measures, and cross-border transfers.
Swiss Code of Obligations (CO): Contains provisions relevant to employment relationships and the processing of employee data, particularly Article 328b which specifically addresses employee data processing.
Swiss Employment Law (Employment Act): Contains provisions about workplace surveillance and monitoring, which are relevant for employee privacy notices.
EU General Data Protection Regulation (GDPR): While not directly applicable in Switzerland, it's relevant for Swiss companies dealing with EU residents or having EU operations, and influences Swiss data protection practices.
Swiss Criminal Code: Contains provisions regarding the breach of privacy and secrecy obligations, relevant for enforcement of data protection violations.
Federal Act on Electronic Signatures (ZertES): Relevant for electronic processing and storage of employee data and electronic signatures on employment-related documents.
Ordinance on Data Protection Certification (ODPC): Provides standards for voluntary data protection certification, which may be relevant for demonstrating compliance.
Explore 208,390+ legal templates
Explore 208,390+ legal templates
Genie's Security Promise
Genie is the safest place to draft. Here's how we prioritise your privacy and security.
Your data is private:
We do not train on your data; Genie's AI improves independently
All data stored on Genie is private to your organisation
Your documents are protected:
Your documents are protected by ultra-secure 256-bit encryption
We are ISO27001 certified, so your data is secure
Organizational security:
You retain IP ownership of your documents and their information
You have full control over your data and who gets to see it