FADP Compliance with ConsentX

No. The FADP is primarily concerned with the processing of personal data and requires transparent information about data collection and processing. Swiss rules concerning cookies and similar technologies also interact with telecommunications legislation. The appropriate consent or objection mechanism depends on the technology, processing activity and applicable legal requirements.

Organisations generally need to provide information such as the identity and contact details of the controller, the purposes of processing, relevant recipients and, where applicable, information about international transfers. The FDPIC recommends that privacy information be concise, transparent, clear and readily accessible.

Individuals have rights including access to their personal data and, where applicable, correction or deletion. The right to information generally does not require the individual to provide a reason for the request.

A DPIA is required when planned processing is likely to result in a high risk to the personality or fundamental rights of data subjects. The risk assessment should consider factors such as the nature, scope, circumstances and purpose of the processing.

Yes. The FDPIC states that the technology-neutral FADP also applies to AI-supported data processing. Organisations using AI should consider transparency, data protection risks and applicable rights relating to automated processing and individual decisions.

The Federal Data Protection and Information Commissioner (FDPIC) is Switzerland's independent federal data protection authority and is responsible for data protection oversight and enforcement at the federal level.