EU Regulations and Switzerland
Switzerland is not an EU member but frequently aligns its legislation with EU standards to maintain access to the EU single market. As a result, many EU regulations and directives have an indirect impact on Swiss companies.
Key National Legislation
- FADP (Federal Act on Data Protection): Revised FADP in force since September 2023, largely aligned with the GDPR
- ISA (Information Security Act): Governs federal information security; mandatory cyber incident reporting for critical infrastructure operators
- CO Art. 964 ff.: Due diligence obligations on conflict minerals and child labour, and non-financial reporting
- FINMASA/FinIA: Financial market supervision with requirements comparable to DORA
Supervisory Authorities
- FDPIC (Federal Data Protection and Information Commissioner): Data protection supervision
- NCSC (National Cyber Security Centre): Cybersecurity and reporting office
- FINMA: Financial market supervisory authority