Switzerland's a bit of an oddity; it's actually not in the EEA, but in EFTA. It's not subject to the ECJ, but to EFTA Court (which is definitely not the ECJ wearing false moustaches). And it's not subject to the GDPR, but it has a law aligned to the GDPR.

EDIT: No, I'm wrong; while EFTA Court used to be based in Switzerland, Switzerland is no longer subject to it. It still exists, but only for EFTA members who are also EEA members. This whole thing is impossible to keep track of.