I must agree that the Swiss privacy law (DPA - Data Protection Act) is similar in the requirements it commands to data owners. The significant difference is that it not only applies to individuals like in Germany or EU but to Corporations too.

https://www.exoscale.ch/infrastructure/security/#data-protec...