菜单
Swiss Federal Act on Data Protection (nFADP) expert. Deep knowledge of the revised 2023 Swiss FADP including voluntary DSO, risk-based breach notification, individual criminal enforcement, Swiss transfer mechanisms, and key divergences from GDPR.
默认使用会先检查来源的 Prompt；你也可以切换为直接命令，或下载本地副本。
决定是否安装前，请先阅读 SKILL.md，以及 SkillsMP 当前展示的配套文件。
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt；运行前请先检查来源。
npx skills add https://github.com/ThomasMoreAI/legal-skills-open --skill ch-fadp-expert命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地？可下载 SkillsMP 当前能够提供的文件。
Use when retrieving arbitration institutional rules (ICC, LCIA, SCC, SIAC, HKIAC, VIAC, МКАС/МАК при ТПП України, UNCITRAL) — fetching current version, verifying redaction applicable to the date of arbitration agreement, constructing URLs for official rule texts
Use when choosing the Polish legal regime for letters, requests, applications, complaints, petitions, public-information requests, KPA filings, PPSA complaints, RODO access requests, registry extracts, court-file access, tax/ZUS/cudzoziemcy/USC procedures, or professional lawyer letters. Prevents mixing UDIP, KPA, PPSA, RODO, registry, special-procedure, and advocate/radca letter regimes.
Use when preparing applications for recognition and enforcement of foreign arbitral awards in Poland, applications for setting aside arbitral awards under KPC art. 1205–1211, or opposing such applications — mapping Article V of the 1958 New York Convention to art. 1214–1215 of the Polish KPC, identifying grounds for refusal, structuring public policy arguments
基于 SOC 职业分类
正在显示 SKILL.md
| name | ch-fadp-expert |
| title | Swiss FADP Expert |
| description | Swiss Federal Act on Data Protection (nFADP) expert. Deep knowledge of the revised 2023 Swiss FADP including voluntary DSO, risk-based breach notification, individual criminal enforcement, Swiss transfer mechanisms, and key divergences from GDPR. |
| author | GRCEngClub |
| author_url | https://github.com/GRCEngClub/claude-grc-engineering/tree/main/plugins/frameworks/ch-fadp/skills/ch-fadp-expert |
| license | MIT |
| version | 0.1.0 |
| execution_mode | open |
| jurisdiction | ch |
| practice | data-protection |
| language | en |
Deep expertise in the Swiss Federal Act on Data Protection (nFADP) — Switzerland's comprehensive data protection law revised in 2023.
Swiss Federal Act on Data Protection (FADP) — Revised 2023 (nFADP/nDSG) Effective Date: September 1, 2023 Scope: Protection of personality and fundamental rights relating to data processing Articles: 60+ articles across 10 sections
Territorial Scope:
Material Scope:
Switzerland is not an EU member state. The FDPIC (Federal Data Protection and Information Commissioner) is the Swiss supervisory authority, not an EU Data Protection Authority. Swiss adequacy decisions are separate from EU adequacy.
Enforcement Model:
Special Categories (require heightened protection):
Financial data is NOT a special category under nFADP (unlike some other jurisdictions).
| Topic | GDPR | nFADP |
|---|---|---|
| Breach notification clock | Notify supervisory authority without undue delay (GDPR Art. 33) | "As soon as possible" — risk-based, no fixed clock |
| Enforcement target | Entity administrative fines (up to 4% global turnover) | Individual criminal liability (CHF 250,000 per responsible person) |
| DPO / DSO appointment | Required based on core activities/scale | Voluntary — appointment optional |
| Transfer mechanism | EU SCCs, adequacy, BCRs | FDPIC-approved SCCs; EU SCCs alone insufficient |
| Lawful basis flexibility | Legitimate interests (Art. 6(1)(f)) is standalone basis | Legitimate interests require demonstrable overriding private/public interest |
| Regulatory body | National DPAs (EU) + EDPB | FDPIC (Swiss) — not an EU authority |
| Sensitive data: financial | Not a special category | Not a special category |
| Protected entities | Natural persons only | Natural persons only (2023 nFADP narrowed scope; legal persons no longer covered) |
CH-FADP is supported in the Secure Controls Framework crosswalk via /grc-engineer:gap-assessment today. The /ch-fadp:assess command routes directly to that crosswalk with SCF framework ID emea-che-fadp-2025.
Note on SCF ID year suffix: The SCF lists this framework as (2025) reflecting their internal intake/release cycle, not the law's effective date of September 1, 2023. This suffix must match the SCF crosswalk index exactly for gap-assessment lookups to resolve correctly — do not change it.
Priority SCF control domains for a Swiss controller:
| Command | Description |
|---|---|
/ch-fadp:assess | Run a gap assessment against Swiss FADP via the SCF crosswalk |
This stub provides the foundation. Level up to Reference or Full depth by implementing:
/ch-fadp:scope — Framework-specific applicability determination (SME carve-out, effects in Switzerland)/ch-fadp:evidence-checklist — Evidence patterns organized by nFADP articles and sections/ch-fadp:dpia-review — Data Protection Impact Assessment workflow for high-risk processing/ch-fadp:transfer-mechanism-check — Cross-border transfer mechanism selection and validation/ch-fadp:breach-triage — Risk-based breach notification urgency and FDPIC reportingSee Framework Plugin Guide for detailed criteria.
A SaaS company processing Swiss resident HR data invokes /ch-fadp:assess during a Claude Code session. The tool evaluates the company's IaC (Terraform for AWS, GitHub Actions workflows) against 35 SCF controls mapped to 90 Swiss FADP requirements, producing a prioritized gap report grouped by severity (blockers, findings, recommendations) with remediation links to implementation code.