From today, Switzerland recognises the Swiss–US Data Privacy Framework (DPF). The Federal Council has added US organisations certified under the framework to its list of countries with an adequate level of data protection.
Key points
- Personal data can flow from Switzerland to certified US organisations without additional safeguards.
- US organisations self-certify to the US Department of Commerce and commit to the DPF Principles.
- The US redress mechanism, including the Data Protection Review Court, is available to Swiss individuals.
- It completes the set alongside the EU–US DPF and the UK Extension.
- Transfers to non-certified US organisations still need other safeguards.
UK groups with Swiss entities can now use a single US certification to cover EU, UK and Swiss transfers. Check that your US suppliers have extended their certification to Switzerland.
Source: Swiss–US Data Privacy Framework (Swiss Federal Council)
Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.
