Switzerland revFADP
compliance
Switzerland's revised Federal Act on Data Protection (revFADP) took effect in September 2023. It relies on transparency and opt-out for most processing, but the FDPIC expects explicit consent for advertising and profiling cookies, and criminal fines target individuals personally.
Trusted by 2,000+clients worldwide
revFADP at a glance
In force
Since 1 September 2023, with no transition period.Revised FADP
Regulator
The FDPIC (Federal Data Protection and Information Commissioner).
Fines up to
CHF 250,000, imposed on responsible individuals, not only companies.Criminal, personal liability
Key duty
Broad transparency: inform about every processing and disclosure, including recipients and countries.
This guide is general information for site owners, not legal advice. Check the current text of the law and your own counsel for your situation.
What the law requires on your website
Transparency first
The revFADP is built on information duties: visitors must be told what is collected, by whom, and where it goes, including cross-border transfers.
Consent where it counts
Consent is one of several justifications. Where you rely on it, it must be informed and voluntary, and for sensitive data or high-risk profiling it must be express. The FDPIC's cookie guidelines expect explicit consent for advertising and profiling cookies, while purely functional cookies need only notice and an easy opt-out.
Data-subject rights
Access, correction, deletion, and objection, with processes to answer them.
How Clickio Consent helps
Serve visitors from Switzerland a consent flow configured for the revFADP: a localized dialog, granular purposes, equal-weight decline and stored records.
One tag, per-region rules
Clickio detects each visitor's location and serves the consent experience you configure for that region, this law included, without affecting any other market.
Multi-regulation →Localized dialogs
Language auto-detection and full text customization put the dialog in your visitors' language, with granular purpose choices and equal-weight decline.
Customization →Evidence on file
Every choice is stored as a consent record: the demonstrable-consent trail modern laws place on the controller.
Reporting →Frequently asked questions
Is a cookie banner mandatory in Switzerland?
Not in the GDPR sense for all cookies. Transparency about tracking is mandatory and telecom rules require an opt-out possibility, and the FDPIC's 2025 cookie guidelines expect a real consent choice for advertising and profiling cookies, so a dialog is in practice needed for ad-funded sites.
How is revFADP different from GDPR?
It leans on transparency and other justifications rather than blanket prior consent, though the FDPIC expects explicit consent for advertising and profiling cookies. Its fines are criminal penalties against individuals up to CHF 250,000. Companies serving both markets usually run GDPR-grade consent everywhere or configure per-region behavior.
My site serves Switzerland and the EU. What should I do?
Configure both: GDPR consent for EEA visitors, a revFADP-appropriate flow for Swiss visitors. Clickio detects the visitor's region and serves the matching experience from one tag.
Does revFADP apply to foreign companies?
Yes. It applies to processing that affects people in Switzerland, wherever the controller sits.
What about data transfers abroad?
The FADP requires disclosing recipient countries and ensuring adequate protection. Your privacy policy carries that disclosure; Clickio's cookie list keeps the tracker inventory accurate.
Explore other regulations
Every guide shows how the same Clickio tag serves the right consent experience for that market. Pick the next one that applies to your audience.
Add this market to your consent setup. Start with a 14-day free trial; per-region settings and multi-language dialogs start on Starter.
Per-region settings (own texts, choices and fallback) and multi-language dialogs start on the Starter plan.