Switzerland: Adopted Federal Council decision adding US to list of countries with adequate data protection (Swiss-US Data Privacy Framework)

On 14 August 2024, the Swiss Federal Council adopted a decision establishing that certified United States (US) companies under the Swiss-US Data Privacy Framework (DPF) offer an adequate level of protection. The decision was adopted following the Federal Office of Justice's assessment and places the US on the list of countries with an adequate level of data protection. The framework allows for the transfer of personal data from Switzerland to certified companies in the US without additional guarantees, adhering to the new data protection law effective from 1 September 2023. The certification ensures that US companies process data solely for its collected purposes, prohibits data transfer to non-certified third parties and establishes a complaint mechanism for data access by US authorities. The decision will enter into force on 15 September 2024.