DPOs and Notification Requirements
Jump to
DPOs and Notification Requirements Start Comparison
Is the concept of data protection officer (DPO) recognized in the jurisdiction?

Last review date: 11 December 2024

Yes.

Are there circumstances in which it is mandatory to appoint a DPO or similar position?

No, unless the data controller is a federal body in such case an appointment is mandatory.

If yes, under what circumstances?

☒  other

Only federal bodies are obligated to appoint a DPO, these are e.g. federal courts. Cantonal bodies (e.g. cantonal courts, cantonal hospitals are not federal bodies, whether they are obligated to appoint a DPO is regulated in the cantonal law; each of the 26 Swiss cantons has its own data protection act that applies to the data processing of cantonal bodies).

Where a DPO is appointed, does the DPO have to meet specific requirements?

Last review date: 11 December 2024

Yes.

If yes, what are these requirements?

☒  other professional qualifications / experience

☒  other

The DPO must exercise their function towards the controller in a professionally independent manner and must not be bound by any instructions.

They must not carry out any activities that are incompatible with his or her tasks as a DPO.

The controller publishes the contact details of the DPO and notifies the Commissioner thereof.

Are there obligations to notify, submit filings to, register with or obtain approval from local data protection authorities to collect and/or process personal data generally?

Last review date: 11 December 2024

No