Also, if you're a non-american traveler, all the constitutional rights you're afforded as an American don't apply. So they can pretty much ask whatever and refuse you access for any reason.
It's like the US is becoming more and more like China. But it's a worlwide trend, really, with old men screaming "We're gonna be in the dark !" ... It's thoroughly depressing.
Edit: As written down in the comments, the part about foreigners' rights is wrong. See comment for correction.
[1]: https://www.theverge.com/2016/12/22/14066082/us-customs-bord...
False
https://www.maniatislawoffice.com/blog/2018/08/do-non-citize...
Their right to do so wasn't challenged, so there's one plank of the Bill of Rights which hasn't rotted through...
They had to stop at the border, and take the next flight back home?
(But what would happen, if one didn't disclose one's social media accounts and other things, when leaving the US)
The real problem is that they now require social media handles on the visa application.
The usual reason given is searches for large sums of cash.
No, it's not true in theory, either.
No, it doesn't.
US “law power” extends as far as the enforcers of that power are able and motivated to extend their reach, which very often extends far outside of US borders.
OTOH, there's places and contexts where that reach tends to encompass more casually and with less case-specific motivation.
It used to be that Switzerland had iron-tight bank secrecy regulations that the US (and the rest of the world) really couldn't breach. Yet over the years the US has managed to force massive changes on Switzerland's financial institutions, and for decades now there's been much more transparency, and Switzerland's banks are not nearly as secret nor as effective at hiding assets as they used to be.
Apart from getting other countries to change their financial regulations to be more in line with what the US wants, the US has also been very successful in doing the same in regards to issues like drug enforcement, human trafficking, child molestation, and many other issues.
So, depending on your threat model and what data you're trying to keep private, I wouldn't count on any jurisdiction ultimately being and remaining safe for your data.
Something else to consider is that once your data is out of your hands, it's easy for whoever has it to make a copy to archive and work on at their leisure. Even if they don't share, sell, compromise, or trade away that data today, that doesn't mean they won't do so at some time in the future when laws, technical capabilities, or incentives change.
Switzerland agreed to FATCA, which only applies to people subject to US taxes and allows those people to refuse to have their information shared with the IRS, in which case the IRS has to specifically request it.
The "massive changes" you mention essentially consist of banks asking you if you're a US person and then, for the big banks, making you fill out a bunch of paperwork and for the small banks, refusing to open an account for you. If you're not subject to US taxes, there's no effect on you whatsoever.
I think the _much_ more interesting thing, which is unrelated to the US (as it's not a party to the agreement) is the AEOI [0].
Anyhow, Switzerland is still very much a sovereign nation and the fact that it has agreed to give limited financial information to the US, with consent of the account holder, does not change that.
A fun bit of proof: copyright infringement, one of the US's pet peeves, is still very much alive in Switzerland. It's your legal right to make as many copies of something as you want and give them to your friends and family [1].
And ultimately, the US' power over Switzerland is quite limited due to the referendum system. Any change they'd like the government to make has to have the consent of the people. The Swiss are quite protective of their privacy so I don't see the US having any success weakening that.
[0]: https://www.efd.admin.ch/efd/en/home/themen/wirtschaft--waeh...
[1]: https://www.admin.ch/opc/en/classified-compilation/19920251/...
Also, for stock accounts, you'd be required to fill out a form in German/Italian/French regarding Swiss taxation.
I agree that you can't count on jurisdiction alone for your data remaining safe. Neither will a technical solution like encryption. The latter might keep your data safe, but not you and your loved ones if there are not some legal limits what people wanting to access it can do.
Eh not really unless you're a US citizen, which is a US problem not a Swiss problem. When I arrived, several years ago, and was opening an account I was asked multiple times If I was (or ever was) a US citizen and had to sign (again multiple times) that I wasn't a US citizen. Many small and even cantonal banks will outright refuse to open accounts for US citizens.
Further, being involved in any violation of or conspiracy to violate American law is a crime, even if you never actually step foot in the US. Companies can be sued in US courts for actions they took overseas. None of this is particular to American law, the same is true in any advanced legal system. American law just has particular significance because of American economic preeminence. Some of the most vexing legal issues, both theoretical and practical, surround this cross-border application of law. And I guarantee you wouldn’t like the result if countries took a strictly physical, territorial approach to their legal authority.
It very case/situation specific. The host country might block extradition for various reasons, but often, the US has global reach.
This also means US companies can ignore GDPR.
The EU would say otherwise but fortunately they don’t get to police the world anymore than any other foreign country.
What is on the device in their hands, on US soil, is subject to their stupidities, whatever those stupidities may be on the day their grubby hands get hold of your phone.
What is located remotely, in a privacy conscious jurisdiction, say Switzerland, is outside of their remit. I know US courts like to think they have power over the world, but they don't. US courts and US law power stops at US borders.
The trick is to make sure nothing gets cached on your local device (including authentication credentials, obviously). A bit like the old Thin Client computing really.
If you want to go one step further, don't travel with working credentials. Rely on someone outside of US jurisdiction to provide you the last piece of the jigsaw in a secure manner once you are in a safe location.