Why this isn’t a rebadged GDPR pack

nFADP compliance diverges from the GDPR precisely where the documentation lives. Legal persons are no longer protected. There’s no closed list of lawful bases — the question is whether a justification is needed to lift an unlawfulness.

The sensitive-data categories are defined in Swiss terms and include data on administrative and criminal proceedings and on social assistance. Breaches are notified to the FDPIC as soon as possible.

And enforcement bites differently: fines of up to CHF 250,000 fall on the responsible individual, not the company.

Every document in this pack is drafted around those differences.

What You Get:

Six documents, each an Explanatory Notice (the reasoning and the relevant legal text) paired with a ready-to-complete template:

• SCOPE — an applicability and role assessment. Establishes whether the nFADP applies to you, in what capacity, whether the extraterritorial reach pulls you in, and whether you must appoint a Swiss representative. This is the entry document, and it’s free to download — see below.
• ROPA — the Article 12 register of processing activities, built to the Swiss Art. 24 OPDo minimum content, not the GDPR Art. 30 list.
• DPIA — the Article 22/23 data protection impact assessment, including the distinctively Swiss consultation route: the FDPIC or your own data protection adviser.
• INFO — the Article 19 duty to inform, the Article 25–29 data subject rights, and the Article 24 breach notification (the “as soon as possible” standard, not a fixed 72 hours).
• DPA — the Article 9 processor engagement record and a checklist that tests your contract against the Swiss conditions, not just the GDPR ones.
• REP — the Article 14/15 Swiss representative appointment record, for overseas controllers who cross the threshold.

Each document is a draft for legal review, structured so a lawyer can approve it fast and an authority can follow it.

Four languages, one Switzerland

Switzerland has four language regions and three of them do business in German, French, and Italian daily.

The pack ships in all four — English as the authoritative reference version, with German, French, and Italian using the correct statutory vocabulary (revDSG / nLPD, Verantwortlicher / responsable du traitement / titolare del trattamento, EDÖB / PFPDT / IFPDT).

You hand a Zürich, Geneva, or Lugano counterpart a document already in their working language.

Start With the Free One

Download the SCOPE applicability assessment at no cost. Work through it, and you’ll know exactly which of the six documents your organisation needs before you spend anything.

Download the free assessment

Who Is This For?

• Swiss SMEs that need nFADP compliance without a full-time DPO.
• Overseas companies — EU, UK, US, Asia — processing data of people in Switzerland who’ve realised their GDPR file doesn’t answer the Swiss questions.
• Swiss processors who need to show controllers a clean Article 9 position.
• Fractional DPOs and law firms who want a defensible Swiss-law starting point rather than a blank page.

What the Price Covers

The full Swiss nFADP compliance pack — all six documents, all four languages — is €2,250, including twelve months of updates as the law and FDPIC guidance evolve (€600/year thereafter). Add a lawyer review of your completed documents, or step up to a full product assessment, when you need it.

A Swiss firm quoting this work from scratch will typically run CHF 6,000–18,000 for a single language. The pack is the same structure at a fraction of the cost, with the reasoning included so you understand what you’re signing.

Part of the European Digital Compliance Suite

Swiss nFADP compliance rarely sits on its own. If you process data of people in Switzerland, you’re often subject to the GDPR at the same time, and if your product collects data, the EU Data Act may reach you too. Each pack in the suite is built to its own regulation — not one document stretched across several — so they fit together without overlapping.

• EU GDPR Essentials: The EU-facing companion to your Swiss nFADP compliance file, for the same processing under Regulation (EU) 2016/679.
• EU Data Act (Regulation 2023/2854): Data access, cloud switching, and contract terms for connected products and data-processing services.
• Swiss nFADP / revDSG: You’re here. Six documents, four languages, drafted to the revised Federal Act as it stands.

Working across AI too? The suite also covers the EU AI Act — synthetic content marking, chatbot and agent disclosure, biometric and emotion recognition, and high-risk deployer obligations with FRIA.

If You Need More Than Documents

Pack with review — €4,500. You complete the records, we review the submission and write up what is weak, what is missing, and what would not survive an enquiry.

Product assessment — from €9,000. We do the assessment and deliver the completed pack.

Authorised representative. For providers established outside the EU (a must for Switzerland). Price on enquiry.

What This Is Not (Important)

This is not legal advice, and it’s not filing-ready out of the box. It’s professionally structured evidence documentation that a qualified lawyer should review against your specific processing before you rely on it.

The non-English versions are accurate translations of the authoritative English. A native legal-language review is recommended before commercial use.