Regulation nLPD

Everything you need to know about the nLPD

The new Swiss Federal Act on Data Protection (nLPD) came into force on September 1, 2023. Inspired by the European GDPR, it strengthens the rights of data subjects and the obligations of Swiss and foreign companies that process data of Swiss residents. With Data Comply One, manage your nLPD compliance like your GDPR, from the same platform.

Book a call Discover nLPD with the platform

Sep 1, 2023

Effective date

CHF 250k

Max criminal fine (individuals)

Switzerland

Scope + extraterritorial

GDPR-aligned

Inspired by the GDPR

What is the nLPD?

The new Swiss Federal Act on Data Protection (nLPD) modernised the Swiss legal framework and aligned it with European standards (GDPR), while keeping Swiss specificities. It applies to any processing of personal data of Swiss residents, including by foreign companies.

Strengthens rights of data subjects

Expands transparency obligations

Introduces personal criminal sanctions

Imposes data breach notification

Mandates a register of processing activities

Who is concerned by the nLPD?

Every Swiss or foreign organisation processing personal data of Swiss residents is concerned, regardless of size or industry.

Swiss companies of every size

Foreign companies processing Swiss data

Public bodies and associations

Subprocessors and providers

Healthcare professionals

Your nLPD obligations

The nLPD imposes specific obligations that overlap with the GDPR but also have unique Swiss elements.

Maintain a register of processing activities (over 250 employees or high-risk processing)

Carry out a DPIA for high-risk processing

Notify data breaches to the FDPIC

Designate a Data Protection Advisor (CPD) in some cases

Respect transparency and information duties

Frame international data transfers

Sanctions and inspections

The nLPD introduces personal criminal sanctions for company directors and employees, which is one of its main specificities.

Criminal fines up to CHF 250,000 for individuals

No corporate fine but individuals can be prosecuted

Administrative measures from the FDPIC

Reputational damage in case of public sanction

Simplifiez votre conformité nLPD avec Data Comply One

nLPD with Data Comply One

Use the platform to manage your nLPD compliance the same way as your GDPR. Same register, same workflows.

Discover the platform

Outsourced DPA

A Swiss-recognised expert handles your nLPD compliance.

Schedule a chat

nLPD e-learning

Train your Swiss teams on the new act.

View the program

GDPR + nLPD audit

Identify gaps with both regulations in one go.

Request an audit

FAQ nLPD

On September 1, 2023. No transition period was granted, so every concerned organisation had to be compliant from day one.

Prêt à piloter votre conformité nLPD ?

30 minutes pour évaluer vos enjeux, sans engagement.

Planifiez un échange Voir les tarifs

Ils nous font confiance

Plus de 1 000 entreprises et organisations nous font confiance

FermobLigne RosetSport 2000BespokeAsk LocalaSYD Digital CareFIDAL AvocatsArgos GroupGroupe ECEEurobio ScientificLPEV LaboratoireAgecetAmour HotelsVille de LyonVNFSénéoBrangeonJacky PerrenotGaléoDomino'sTriballatCastel FrèresEuryale1001 Vies HabitatTagerimICTS FranceGroupe AirwellGroupe LorcaFermobLigne RosetSport 2000BespokeAsk LocalaSYD Digital CareFIDAL AvocatsArgos GroupGroupe ECEEurobio ScientificLPEV LaboratoireAgecetAmour HotelsVille de LyonVNFSénéoBrangeonJacky PerrenotGaléoDomino'sTriballatCastel FrèresEuryale1001 Vies HabitatTagerimICTS FranceGroupe AirwellGroupe LorcaFermobLigne RosetSport 2000BespokeAsk LocalaSYD Digital CareFIDAL AvocatsArgos GroupGroupe ECEEurobio ScientificLPEV LaboratoireAgecetAmour HotelsVille de LyonVNFSénéoBrangeonJacky PerrenotGaléoDomino'sTriballatCastel FrèresEuryale1001 Vies HabitatTagerimICTS FranceGroupe AirwellGroupe Lorca
TruffautSpartooRossignolExaprobe · EconocomSilaeGroupe KardolDiotSiaciXL AssureQiiroValerio TherapeuticsMédicaligneHôtels CollectionJOACollectivité de CorseRégion RéunionGolfe de Saint-TropezDistri CashVoisin ServicesAutocars MaisonneuveDuvel MoortgatKusmi TeaMaison NicolasGroupe SGMFair' PromotionReims HabitatAvrilAlstef GroupFFTATruffautSpartooRossignolExaprobe · EconocomSilaeGroupe KardolDiotSiaciXL AssureQiiroValerio TherapeuticsMédicaligneHôtels CollectionJOACollectivité de CorseRégion RéunionGolfe de Saint-TropezDistri CashVoisin ServicesAutocars MaisonneuveDuvel MoortgatKusmi TeaMaison NicolasGroupe SGMFair' PromotionReims HabitatAvrilAlstef GroupFFTATruffautSpartooRossignolExaprobe · EconocomSilaeGroupe KardolDiotSiaciXL AssureQiiroValerio TherapeuticsMédicaligneHôtels CollectionJOACollectivité de CorseRégion RéunionGolfe de Saint-TropezDistri CashVoisin ServicesAutocars MaisonneuveDuvel MoortgatKusmi TeaMaison NicolasGroupe SGMFair' PromotionReims HabitatAvrilAlstef GroupFFTA
📚 Réglementations connexes

Découvrir les autres réglementations européennes

Construisez une vision globale de votre conformité multi-réglementaire.

RGPD

Protection des données personnelles UE.

Découvrir

NIS 2

Cybersécurité européenne · entités essentielles & importantes.

Découvrir

DORA

Résilience opérationnelle numérique · secteur financier.

Découvrir

AI Act

Gouvernance des systèmes d'intelligence artificielle.

Découvrir

Data Act

Partage et accès aux données B2B / B2G.

Découvrir
🔗 Solutions complémentaires

Découvrir les autres solutions DCO

Combinez plusieurs solutions pour une approche globale de votre conformité.

DPO externalisé

Un DPO désigné CNIL pour piloter votre RGPD.

Découvrir

RSSI externalisé

Un RSSI dédié pour la cybersécurité (NIS 2 · DORA).

Découvrir

Plateforme logicielle

Le logiciel tout-en-un de pilotage de la conformité.

Découvrir

Formation e-learning

Sensibilisez vos équipes avec Daia (RGPD · IA · Cyber).

Découvrir