EU Representative for Swiss Companies

Does GDPR Apply to Swiss Companies?

Yes. Despite Switzerland’s geographic location in the heart of Europe and its bilateral agreements with the EU, Switzerland is a third country under GDPR. Swiss companies are treated the same as US, Chinese, or Australian companies for GDPR purposes. If you offer goods or services to individuals in the EU or monitor their behavior, GDPR applies to you.

This is a common point of confusion. Swiss businesses often assume that because Switzerland is surrounded by EU member states and has deep economic integration with the EU, GDPR doesn’t apply or that the revised FADP (nDSG) is sufficient. Both assumptions are incorrect.

nDSG / FADP vs EU GDPR — The Critical Differences

Switzerland’s revision of its Federal Act on Data Protection (nDSG), effective September 2023, was explicitly designed to align with GDPR — but they are not the same law. Key differences:

• Territorial scope: nDSG applies to Swiss data subjects; GDPR applies to EU data subjects. Different jurisdictions.
• EU Representative: nDSG does have a representative requirement (Article 14) for data processors outside Switzerland — but this covers data processing of Swiss residents, not EU residents. You still need an EU Representative under GDPR for EU data subjects.
• Fines: nDSG maximum is CHF 250,000 (approximately €260,000); GDPR maximum is €20 million or 4% of global turnover — widely different orders of magnitude.
• Adequacy: Switzerland is on the EU’s adequacy list, meaning data transfers from EU to Switzerland are permitted — but this does not exempt Swiss companies from Article 27 when processing EU data.

Swiss Businesses Most Impacted

• Swiss manufacturers exporting machinery, pharmaceuticals, or watches to the EU — customer data, warranty records, and shipping data all involve EU personal data
• Swiss financial services — banks, wealth managers, and insurers serving EU clients: highly regulated, high GDPR risk
• Swiss tech companies — SaaS, fintech, and medtech startups with EU users
• Swiss tourism — hotels, travel agencies, and tour operators serving EU guests: booking and preference data

Why Swiss Companies Choose EU Shield

• EU-established legal address for GDPR Article 27 compliance
• 24-hour correspondence forwarding with digital notification
• Record keeping compliant with both GDPR and nDSG
• Dual compliance support for Swiss and EU requirements
• German, French, and Italian language support for Swiss clients
• Competitive €490/year flat fee

← Read the Complete Guide · See Pricing →