Switzerland Tightens the Rules: Biometrics Only With Explicit Consent

This summer, Switzerland made a crucial step in enhancing the digital privacy of its citizens, enacting the strictest rules so far regarding the processing of biometric data. The latest amendments to the Federal Act on Data Protection (FADP) clearly define biometric data such as voiceprints, facial recognition, fingerprints, or iris scans, as “sensitive personal data.” Given their unique ability to identify individuals and their potential for misuse, processing such data now requires explicit user consent, as well as transparent communication about the purposes and methods of processing.

Until now, companies and banks offering digital services often provided users with “shortcuts” to account access via voice or biometric authentication. The new regulations put an end to such practices: users must now be clearly and fully informed, and their consent must be provided explicitly. “Silence” or routine notifications can no longer substitute for true consent. If explicit consent is missing, companies are obliged to immediately delete any existing biometric data from all their systems.

The Swiss Federal Data Protection and Information Commissioner (FDPIC) also gained expanded powers: in addition to ordering immediate deletion of data, the Commissioner is responsible for carrying out inspections and imposing penalties for violations. Fines can reach up to 250,000 Swiss francs. Experts note that the growing number of digital services increases the risk of identity theft, so these regulations help restore trust in digital systems.

These changes are not just a response to local needs: they are part of a broader wave of raising privacy standards across Europe. Switzerland is now on par with the most advanced European countries in digital identity protection, following trends set by the EU’s General Data Protection Regulation (GDPR).

From August 2025, Swiss citizens can be sure: without their clear and informed consent, no one can create, store, or use their biometric data. The era of automatic collection and processing of biometric information, where digital fingerprints often appeared without users’ knowledge, is now a thing of the past. In this way, the state sends a strong message about the priority of privacy protection and the digital dignity of every individual.

For more information and the official text of the Swiss Federal Act on Data Protection (FADP), see the government’s website:
https://www.fedlex.admin.ch/eli/cc/2022/491/en