Term: Swiss-U.S. Data Privacy Framework

As part of the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF), personal data can be securely transferred from Switzerland to accredited U.S. companies. In compliance with Swiss law, these transfers must meet this framework’s data protection standards.

It was developed by the U.S. Department of Commerce in collaboration with the Swiss Federal Administration, among other stakeholders, to ensure that data transfers are reliable while ensuring compliance with data protection laws.

Among the key features of the Swiss-U.S. Data Privacy Framework are:

Safeguards and Redress Mechanisms: The framework includes safeguards for data access by U.S. public authorities and provides access to redress mechanisms for individuals whose data is transferred.

Certification: It is possible for U.S. companies to become certified under this framework, confirming that they comply with the necessary data protection measures and guarantees. Data must only be processed for the purposes for which it was collected by certified companies, and it cannot be disclosed to non-certified parties.

Adequacy Decision: The Swiss Federal Council has recognized U.S. companies certified under the Swiss-U.S. Data Privacy Framework as having an adequate level of data protection, allowing personal data to be transferred to certified U.S. companies without additional guarantees.

« Back to Glossary Index