The legal obligations of Swiss companies

FADP, Cyber Resilience Act, EN 18031: which laws apply to your company, from when, and what you actually risk.

10 articles in this domain

The FADP for SMEs: your concrete obligations

What Switzerland's data protection law really requires of an SME: obligations, processing register, breach reporting and penalties.

Read

Reporting a data breach to the FDPIC: a practical guide

When to report a data breach to the FDPIC, within what timeframe, how, and with what content. Swiss law sets no 72-hour deadline.

Read

Cyber Resilience Act: what the Swiss SME must do

The European CRA applies to Swiss manufacturers who export. Deadlines, products covered and obligations, explained for an SME.

Read

NIS2 and Swiss SMEs: what actually concerns you

NIS2 does not apply in Switzerland. But your European clients pass its requirements on to you by contract. What concerns you, and how to respond.

Read

EN 18031 and the RED Directive: mandatory cybersecurity for connected devices

Radio equipment sold in Europe: what the RED Directive and EN 18031 standards have required of Swiss manufacturers since 1 August 2025.

Read

IEC 62443: securing industrial machines and systems

The IEC 62443 standard explained for a leader of an industrial SME: why office-grade security is not enough on the shop floor, zones, conduits and levels.

Read

The Fribourg LPrD: municipalities, public institutions and service providers

The Fribourg data protection law applies to municipalities, public institutions and private parties carrying out public tasks.

Read

GDPR or FADP: which one applies to your business?

Having a website reachable from Europe doesn't make GDPR apply to you. Who it really covers, and five concrete differences with the FADP.

Read

Cyber obligations: what applies to your sector

Retail, healthcare, trustees, industry, construction, IT: which cyber and data protection obligations really apply to your Swiss SME.

Read

A major client sends you a security questionnaire: how do you respond?

A client requires a security questionnaire. How to answer honestly without losing the contract, and what to prepare once and for all.

Read