Data protection for private individuals in Switzerland

Art. 2 DPO

Goals

Chapter 1: General ProvisionsSection 1: Data Security

Statutory textStatus: 1 December 2025

The controller and the processor must take technical and organisational measures in order to ensure, depending on the level of protection required, that the data being processed:

  • a.

    are only accessible to authorised persons (confidentiality);

  • b.

    are available when they are required (availability);

  • c.

    are not altered without authorisation or unintentionally (integrity);

  • d.

    are processed in a traceable manner (traceability).

Source: Version on FedlexThis translation is not an official version. Only the German, French and Italian versions are legally binding.

In brief

Data security measures pursue four goals: the data is accessible only to authorised persons (confidentiality), is available when needed (availability), is not altered without authorisation or unintentionally (integrity) and is processed in a traceable manner (traceability).

What does this mean for me?

This obligation is aimed at companies and authorities. For you, it means: only authorised persons may view your data.

Implements these provisions of the Federal Act on Data Protection (FADP)

  1. Art. 8 FADPData security

Explanation by mydatenschutz.ch in plain language – not legal advice. The statutory text is authoritative.