nFADP / revDSG — revised Federal Act on Data Protection (in force 1 Sept 2023)

nFADP / revDSG — revised Federal Act on Data Protection (in force 1 Sept 2023) — 75% of in-scope requirements covered.

4 requirements · 4 in scope (2 enforced · 2 designed). The 75% is weighted over the in-scope base.

nFADP / revDSG: requirement → the KYE™ artefact that enforces it

Demo data

You learn: Which requirements KYE™ enforces at runtime and with which artefact. You can: Walk the requirements.

  1. nfadp-basis · enforced

    nFADP / revDSG — revised Federal Act on Data Protection (in force 1 Sept 2023) — Switzerland’s own…

    Audit events: kye.purpose.admissibility.v1, kye.evidence.decision_map.v1 · Constitution: 12 purpose permission, 21 delegated auditability

  2. supervisory-authority · enforced

    Cooperation with the national supervisory authority (the FDPIC) — records of processing and the…

    Audit events: kye.evidence.pack.v1, kye.compliance.attestation.v1 · Constitution: 21 delegated auditability, 31 data governance pack

  3. breach-notification · designed

    Personal-data breach notification to the FDPIC (and affected individuals) within the GDPR Art. 33/34 window…

    Audit events: kye.signal.incident.opened.v1, kye.compliance.attestation.v1 · Constitution: 13 resilience loop

  4. adequacy-cross-border · designed

    nFADP cross-border transfer regime — Switzerland is a non-EU country with an EU adequacy decision; transfers…

    Audit events: kye.purpose.admissibility.v1, kye.evidence.tool_call.v1 · Constitution: 12 purpose permission, 30 audit worm retention

How this widget is built
Demonstrates
KYE™ Compliance Mapping Rail™
Components
  • Framework requirement (clause)
  • Coverage status
  • KYE™ enforcement artefact (event, decision-record field, Evidence Pack™ entry)
Flow
Clause → status → the KYE™ artefact that enforces it, enforced requirements first. Architecture diagram
Used on

Source: nFADP / revDSG — revised Federal Act on Data Protection (in force 1 Sept 2023). Switzerland is outside the EU/EEA and enacts its own GDPR-aligned data-protection statute under an EU adequacy decision; KYE™ maps the national deltas and edges AI/security obligations to the EU-wide frameworks where Swiss law references them.

By category

CategoryReqsEnforcedDesignedAdvisoryDeferredCoverage
National statute (non-EU, adequacy)11000100%
Supervisory authority + accountability11000100%
Breach notification (national channel)1010050%
Cross-border transfer / adequacy (non-EU)1010050%

Every requirement → the KYE™ artefact that enforces it

IDTitleStatusKYE™ enforcement
ch-nfadp.nfadp-basisnFADP / revDSG — revised Federal Act on Data Protection (in force 1 Sept 2023) — Switzerland’s own (GDPR-aligned, not transposing) federal data-protection statute; substantive notice / proportionality / data-subject-rights obligationsenforcedaudit_events: kye.purpose.admissibility.v1, kye.evidence.decision_map.v1
engines: internal, internal
constitution_refs: constitution/12-PURPOSE-PERMISSION.md, constitution/21-DELEGATED-AUDITABILITY.md
ch-nfadp.supervisory-authorityCooperation with the national supervisory authority (the FDPIC) — records of processing and the demonstrable-accountability account an AI agent's data processing must produce on requestenforcedaudit_events: kye.evidence.pack.v1, kye.compliance.attestation.v1
engines: internal, internal
constitution_refs: constitution/21-DELEGATED-AUDITABILITY.md, constitution/31-DATA-GOVERNANCE-PACK.md
ch-nfadp.breach-notificationPersonal-data breach notification to the FDPIC (and affected individuals) within the GDPR Art. 33/34 window, on the national reporting channeldesignedaudit_events: kye.signal.incident.opened.v1, kye.compliance.attestation.v1
engines: internal, internal
constitution_refs: constitution/13-RESILIENCE-LOOP.md
ch-nfadp.adequacy-cross-bordernFADP cross-border transfer regime — Switzerland is a non-EU country with an EU adequacy decision; transfers to Switzerland and onward require an adequate level of protection or appropriate safeguardsdesignedaudit_events: kye.purpose.admissibility.v1, kye.evidence.tool_call.v1
engines: internal, internal
constitution_refs: constitution/12-PURPOSE-PERMISSION.md, constitution/30-AUDIT-WORM-RETENTION.md

Canonical KYE™ surfaces referenced on this page: KYE Protocol™.