Data protection for private individuals in Switzerland

Art. 40 DPO

Self-regulation

Chapter 6: Federal Data Protection and Information Commissioner

Statutory textStatus: 1 December 2025

The FDPIC shall issue processing regulations for all automated processing; Article 6 paragraph 1 does not apply.

Source: Version on FedlexThis translation is not an official version. Only the German, French and Italian versions are legally binding.

In brief

The FDPIC must issue processing regulations for all of its automated processing; the conditions under Art. 6 para. 1 DPO do not apply to it.

What does this mean for me?

This rule concerns the FDPIC. For you, it means: the supervisory authority must set out all of its own processing in regulations, without exception.

Implements these provisions of the Federal Act on Data Protection (FADP)

  1. Art. 48 FADPSelf-regulation of the FDPIC

Explanation by mydatenschutz.ch in plain language – not legal advice. The statutory text is authoritative.