On this page
Check each company receiving the information
A Zurich business might put customer contacts and employee tickets into a system used by an American affiliate and a separate provider. Identify the actual recipients, data, purposes and access for each disclosure. Forming the affiliate does not supply a transfer route.
The official Swiss assessment describes the public Commerce participant list and annual recertification. Withdrawal or failure to recertify can lead to removal. Check current Swiss-U.S. participation and relevant scope for the recipient and data, not a parent’s badge or sales assurance.
If certification does not cover it, assess the alternative conditions
For a destination without the relevant adequacy, FDPIC describes recognised standard clauses, specific contractual guarantees and approved binding corporate rules, with different approval or notification requirements. It also identifies Article 17 exceptions. These are conditional routes, not interchangeable form contracts.
Consider whether the recipient can comply and whether supplementary technical measures are necessary. A generic signed agreement is not the whole assessment.
Plan how access and changes will be handled
Check lawful processing, security, contracts, employee or sensitive data and onward disclosures as well. Give affected people the required information, including countries and guarantees where required. Recheck before relying on a changed recipient, purpose or certification; an earlier result is not permanent.
Scope
- No company’s certification or particular transfer was checked. The 2024 assessment is historical support; the live FOJ list and FDPIC guidance supply the reviewed context. This does not complete FADP/GDPR compliance or decide tax, franchise or staffing questions.
Next step
Verify the actual provider and affiliate’s applicable transfer routes before sharing the relevant records.
Sources & review notes
Swiss Federal Data Protection and Information Commissioner (FDPIC)
Passage, dates and research notes
official-guidance · FADP Articles 16–17; contractual routes; information and inventory duties; Swiss-U.S. framework
Data subjects must be informed if their data is to be disclosed abroad
Actual official current page read in full for Articles 16, 17 and 19, safeguards and the September 15, 2024 U.S. amendment. Older linked Article 6 guidance is not represented as current law. No recipient or specific company certification was checked.
Swiss Federal Office of Justice
Passage, dates and research notes
official-guidance · Binding Annex 1 list reproduced by FOJ; United States entry and certification qualification
personal data processed by organisations certified in accordance with the Swiss-U.S. Data Privacy Framework Principles
Current official page published January 22, 2026 read. Its displayed table is updated to September 15, 2024. The United States table cell was read from the public HTML hydration payload, decoded and preserved in swiss-adequacy-table-extract.txt; it is not a search excerpt. The table qualifies adequacy by Swiss-U.S. certification, not geography alone.
Swiss Federal Office of Justice, Public Law Division
Passage, dates and research notes
official-guidance · Sections 3.1.2 and 3.2.1: scope, certification, annual recertification and participant list
To initially self-certify or subsequently re-certify (on an annual basis)
Official April 30, 2024 assessment PDF, not the final amendment itself. Cited scope and certification sections read with surrounding safeguards context; current FOJ list and FDPIC guidance independently reviewed. No blanket present-status claim about all historical assessment statements or U.S. institutions is made.
Detailed rule records (1)
Before a Swiss personal-data disclosure abroad, establish the relevant FADP transfer route. The current FOJ list qualifies U.S. adequacy by Swiss-U.S. Data Privacy Framework certification of the recipient organization. Verify the actual recipient and covered processing; otherwise assess another permitted safeguard or exception. Information and inventory duties remain relevant.
Cross-border transfer of personal data Recognition by Switzerland of States that guarantee an adequate level of data protection Assessment of adequacy – United States: Swiss-U.S. Data Privacy FrameworkKeep this reading in your learning library.
Progress privacy
Off by default. Without remembering, changes last on this page. If enabled, only public content identifiers and self-reported progress are stored in this browser profile. Anyone using the same profile could see them. No plan inputs or contact details are included. Reset or export in learning settings.
This is a reading aid, not evidence of disclosure delivery, expertise or legal approval.