Is Doxxing Legal in Switzerland After the 2026 Policy Reforms?

No.

Doxxing—revealing private personal data without consent—violates Swiss privacy laws under the Federal Act on Data Protection (FADP) and the Criminal Code (Art. 179novies). The Federal Data Protection and Information Commissioner (FDPIC) enforces these rules, with penalties reaching CHF 250,000 for violations. Since 2026, stricter EU-aligned FADP amendments impose heavier obligations on digital platforms to prevent unauthorized data exposure.

Key Regulations for Doxxing in Switzerland

  • Federal Act on Data Protection (FADP, Art. 32) – Mandates explicit consent for processing sensitive personal data, including home addresses or financial records. Unauthorized disclosure triggers liability under civil and criminal law.
  • Criminal Code (Art. 179novies) – Criminalizes the publication of private data with intent to harm, punishable by up to 3 years imprisonment or fines. Applies even if the data is publicly accessible elsewhere.
  • FDPIC Guidelines (2024–2026) – Requires organizations to implement technical safeguards (e.g., anonymization tools) and report breaches within 72 hours to the FDPIC under the revised FADP. Non-compliance risks administrative fines up to 4% of global revenue for foreign entities targeting Swiss residents.