Data Protection In the DACH region

This report provides an analysis of data protection and enforcement trends across the following countries:

• Austria
• Germany
• Switzerland

Austria, like all EU member states, has implemented the EU General Data Protection Regulation (GDPR). We’ve provided an analysis of the available data around how the Austrian data protection authority (DPA) approaches GDPR enforcement and some commentary on two significant recent enforcement decisions.

 Germany has a unique federal system of government with each state responsible for its own regulation. We’ve provided details of each of Germany’s many regulators, plus some analysis of the three biggest GDPR fines imposed in the country.

Switzerland is not an EU member state and has its own data protection law. We’ve provided an overview of Switzerland’s Federal Act on Data Protection (FADP) and some guidance on how to prepare for changes to the law that are due in 2023.