Cybersecurity Policy Report, Swiss Federal Council Approves Data Privacy Pact With U.S., (Aug 15, 2024)

By Tony Foley

The Swiss Federal Council announced yesterday that the new Switzerland-U.S. Data Privacy Framework (DPF) would allow for the secure exchange of personal data between Switzerland and U.S. companies that have been certified under the DPF.

According to a council news release, an assessment by the Federal Office of Justice led the council to conclude that the new DPF provided adequate protection for personal data transferred between the two countries, meaning that companies may make a transfer without any additional guarantees.

Specifically, the council noted that the certification for U.S. companies and a new U.S. data protection review court would allow for such transfers. However, the press release clarifies that certified companies may only process data for the purposes for which they were collected, that disclosures to third parties like non-certified companies is not permitted, and that in the event of access to personal data transferred from Switzerland to the U.S. by U.S. public authorities, various safeguards, including access to a redress mechanism, are provided.

The council will bring a corresponding amendment to the Data Protection Ordinance into force on Sept. 15.

News: InternationalLegislation DataPrivacy