2026

The FDPIC has concluded its investigation into a credit reporting agency by issuing a ruling. Among other things, it has prohibited the agency from further processing or disclosing personal data which it processes as part of its creditworthiness database for marketing purposes.

On 8 October 2026, the FDPIC was informed by PK Softech AG of a cyberattack on its IT infrastructure and possible breaches of data security. During the attack, data was extracted from several pension funds, including the Federal Pension Fund, Publica. Consequently, the pension funds affected also reported the incident to the FDPIC. Having initiated an informal preliminary investigation with Publica on 14 October 2026, the FDPIC opened a formal investigation into PK Softech AG on 22 October 2026.

The FDPIC has prohibited Add Conti GmbH from processing and disclosing personal data for advertising purposes without valid consent. The company must delete the data in question. The decision is now final. In August 2025, the FDPIC had already filed a criminal complaint against the responsible bodies of Add Conti GmbH for breach of the duty to cooperate.

In two judgements dated 13 October 2026, the Federal Administrative Court ruled, on the one hand, that PostFinance AG must obtain the explicit consent of the data subjects for the creation of voiceprints. On the other hand, the Federal Administrative Court confirmed that the FDPIC is entitled to publish its decision.

This year’s Cyber Security Month is dedicated to AI in a professional context. The FDPIC and the NCSC are drawing attention to the key challenges.

On 30 September 2026, the Commissioner, Adrian Lobsiger, met with his Austrian counterpart, Matthias Schmidl, for a bilateral discussion in Vienna. The meeting focused on the roles and responsibilities of the national data protection supervisory authorities in relation to developments in information technology, such as artificial intelligence (AI). In addition to data protection issues, the principle of public freedom of information was also discussed, as it is of particular importance to both national authorities.

In a decision dated 29 September 2026, the Federal Data Protection and Information Commissioner (FDPIC) concluded its investigation into Baselland Transport AG (BLT) regarding the use of bodycams.

On 12 August 2026, the Federal Council instructed the Federal Department of Finance to conduct a consultation procedure on the amendment to the Banking Act (implementation of the measures set out in the Federal Council’s report on banking stability and the report of the parliamentary commission of inquiry). The aim of the legislative amendment is to strengthen and further develop the ‘too big to fail’ framework.

In its ruling of 22 June 2026, the Federal Administrative Court dismissed Inkasso-Team AG’s appeal, confirming that the publication of personal data for the purpose of locating alleged debtors and warning third parties is a violation of personality rights and cannot be justified.

With its ruling dated 17 April 2026, the Federal Data Protection and Information Commissioner (FDPIC) concluded the investigation proceedings against Cream della Cream Switzerland GmbH and Philipp Plein International AG.

The Federal Data Protection and Information Commissioner (FDPIC) has issued a warning to the operator of a website. On the platform, documents, photos and copies of identification cards of alleged debtors were publicly accessible.

Emails are currently circulating that purport to be from the FDPIC. The senders target these messages specifically at website operators, claiming that there have been breaches of the Swiss Data Protection Act (FDPA).

As part of an awareness campaign, the FDPIC has published a factsheet on the use of cookies. Aimed at webseite users, it explains how they can retain control over their own data and minimize the digital footprint they leave behind while browsing.

On December 12, 2025, the Federal Council has ordered the Federal Department of the Environment, Transport, Energy and Communications (DETEC) to initiate the consultation procedure concerning the partial revision of the Telecommunications Act (TCA). This revision aims to improve mobile telephony coverage in Switzerland.

Smartwatches and fitness trackers, which monitor your physical activity and bodily functions, are now widely used. Smart glasses, which make it easy to take and share photos and videos, are also gaining in popularity. As all these body-worn devices pose a particular threat to privacy, users should exercise particular caution when using them. The FDPIC publishes practical advice on this subject on its website.

In reference to media reports on the use of bodycams by train attendants at BLT Baselland Transport AG, the FDPIC announces that he has opened  an investigation into this transport company in accordance with Art. 49 ff. of the Federal Act on Data Protection, as there are sufficient indications that a violation of data protection regulations may have occurred.

The Federal Data Protection and Information Commissioner has published, together with 60 other national data protection authorities, a joint statement on AI-generated images and privacy protection.

On 18 February 2026, the Federal Council submitted the above-mentioned bill for consultation, proposing an amendment to Article 57 of the Federal Constitution and a partial revision of the Federal Act on Police Information Systems (BPI). The bill aims to create the legal basis for the Federal Office of Police (fedpol) to operate a police query platform for the cantons and the Confederation.

On 27 November 2025, Digitec Galaxus informed the FDPIC that it had implemented his formal recommendation that customers be given the option to object to the processing of their personal data for marketing purposes. Following criticism over excessive data processing, users can now disable personalisation with one click (one-click opt-out).

28 January marks International Data Protection Day. As part of a public conference organised by the University of Lausanne to mark the occasion, the FDPIC spoke about data protection issues related to the use of generative AI.