Tech excellence, human relevance

Services / Governance, Data Protection & Compliance

Data protection and compliance consulting (Swiss FADP) Compliance you can prove.

Regulated organisations must be able to prove that data is protected and processes work. We combine technical understanding with basic legal knowledge and translate requirements from the Swiss Federal Act on Data Protection, audits and industry regulations into clear responsibilities, controls and evidence.

  • Swiss FADP
  • Notification duties
  • Audit preparation
  • Governance model
  • Archiving
  • Purview

What we deliver

01 Governance models Roles, responsibilities, standards and approval processes for Microsoft 365 and infrastructure.
02 Data protection in practice Implement and document technical measures under the FADP, including data flows and the record of processing activities.
03 Audit preparation Compile evidence, close gaps, answer the auditors' questions on a sound technical basis.
04 Archiving and retention Journaling, archiving and migration of legacy archives to Microsoft Purview.

Notification duties

If an incident affects personal data with a high risk, the Federal Act on Data Protection requires notification to the FDPIC as soon as possible (Art. 24 FADP). Since 1 April 2025, operators of critical infrastructure must report cyberattacks to the BACS within 24 hours. We make sure the technical basis for this is in place before it is needed; the legal assessment remains with you or your legal counsel.

Services in this field

Planning something in Governance, Data Protection & Compliance?

In a first conversation, we'll look at where you stand, the risks and the most sensible next step.

Get in touch →

Other fields of consulting