What is the FDPIC and what powers does it have?
By Advisorn · updated on 25 October 2026 · Art. 43-58, 63 and 65 FADP
In short
The Federal Data Protection and Information Commissioner (FDPIC, in German EDÖB) supervises the application of the FADP by private businesses and federal bodies (Art. 43-58 FADP). It can open an investigation and order that a processing be modified, suspended or stopped and that data be deleted (Art. 49-51 FADP), but it does not impose fines: these are imposed by the cantonal criminal prosecution authorities.
What it does
- receives the notifications of breaches of data security (Art. 24 FADP);
- receives the contact details of the data protection advisors that businesses communicate to it (Art. 10 para. 3 FADP);
- is consulted when an impact assessment shows a high risk that remains (Art. 23 FADP);
- conducts investigations, on its own initiative or following a report (Art. 49 FADP);
- informs and advises, publishes guides and takes positions on current issues.
How much its decisions weigh
The FDPIC's rulings can be appealed before the Federal Administrative Court. Whoever wilfully fails to comply with a ruling issued with reference to the penalty risks a fine of up to CHF 250,000 (Art. 63 FADP).
The cantons have their own data protection authorities, competent for cantonal and municipal public bodies, not for private businesses.
Related questions
Useful templates
General information, not advice on your case: for your case the text of the law prevails. For a question about your case there is Advisorn's consulting.