What is the nFADP DSAR deadline?

Under New Federal Act on Data Protection (revFADP) (nFADP), the standard response deadline is 30 days. The counting method is calendar days, starting from the day of receipt.

Can I extend a nFADP deadline?

Yes. An extension of 30 days is available when: High volume of requests or complex request requiring extensive research. You must notify the data subject within: Within the original 30-day deadline.

nFADP is enforced by Federal Data Protection and Information Commissioner (FDPIC). Maximum penalties: CHF 250,000 for individuals (criminal); no administrative fines for companies.

🇨🇭nFADP

Switzerland — nFADP DSAR Deadline Calculator

Calculate your exact response deadline under New Federal Act on Data Protection (revFADP) (nFADP).

Configure your DSAR

Select jurisdiction, request type, and date — results update instantly.

Jurisdiction

Your deadline will appear here

Select a jurisdiction and request type to get started

nFADP Overview

Full Name

New Federal Act on Data Protection (revFADP)

Effective Since

2023-09-01

Regulatory Authority

Federal Data Protection and Information Commissioner (FDPIC)

Official Text

View law

Maximum Penalties

CHF 250,000 for individuals (criminal); no administrative fines for companies

Recent example: Criminal liability focuses on responsible individuals, not entities

Request Types & Deadlines

Request Type	Deadline	Extension
Right of Access Art. 25 — Right to obtain information about personal data processing	30 days	+30 days
Right to Rectification Art. 32 — Right to have inaccurate personal data corrected	30 days	+30 days
Right to Erasure Art. 32 — Right to request deletion of personal data	30 days	+30 days
Right to Data Portability Art. 28 — Right to receive or transfer personal data in a common format	30 days	+30 days

Extension Rules

Extension period: 30 days

Conditions: High volume of requests or complex request requiring extensive research

Notification required: Within the original 30-day deadline

Special Rules & Common Mistakes

•Must respond within 30 calendar days of receiving the request
•Extension of up to 30 additional days for complex or voluminous requests
•Information must be provided free of charge as a general rule
•Not an EU member state but closely aligned with GDPR principles
•Criminal sanctions possible for intentional violations (up to CHF 250,000 for individuals)
•The nFADP replaced the former FADP on September 1, 2023

Compare with Other Jurisdictions

Law	Deadline	Method	Extension
🇨🇭 Switzerland nFADP	30 days	calendar days	+30 days
🇪🇺 EU GDPR	1 months	calendar months	+2 months
🇬🇧 UK GDPR	1 months	calendar months	+2 months
🇺🇸 CCPA	45 days	calendar days	+45 days