FADP Compliance Checklist for 2025–2026
Switzerland's revised DSG has been in force since September 2023. Companies still working through implementation will find this practical checklist a useful starting point for gap assessment.
Working notes on data observability, GDPR, and FADP from our practice in Zurich — written for data teams and compliance professionals who need specifics, not summaries.
Switzerland's revised DSG has been in force since September 2023. Companies still working through implementation will find this practical checklist a useful starting point for gap assessment.
Not all data observability tooling is built with privacy in mind. We review the architectural decisions that determine whether your monitoring stack supports or conflicts with your GDPR obligations.
Data subject requests must be fulfilled within strict timelines. Manual processes rarely scale. This guide reviews automation approaches that preserve auditability and do not introduce new compliance risk.
When a database column changes type or a new field captures personal data without a corresponding ROPA update, you have a compliance gap your DPO does not know exists.
Most Records of Processing Activities sit in a spreadsheet no one updates. We outline a structure and maintenance discipline that makes your ROPA a live compliance asset rather than a filing obligation.
Data lineage was once the domain of data engineers. For DPOs navigating Art. 30 GDPR obligations, it has become a compliance necessity. Here is how to think about it.
Switzerland's revised Federal Act on Data Protection shares significant ground with the GDPR — but the differences matter. We break down the practical implications for companies operating across both regimes.
Most GDPR compliance programmes focus on consent and documentation. Fewer address the data quality problems that quietly undermine both. Here is why they should.