Employment Contract: Data Protection Clause under revDSG
Swiss employers must disclose how they collect, store, and process employee personal data under the revised Federal Data Protection Act (revDSG). A data protection clause clarifies lawful basis, retention periods, and employee rights—preventing disputes over consent and compliance.
The revised Federal Data Protection Act (revDSG) applies to all employers in Switzerland, regardless of size. When you hire someone, you begin processing their personal data: name, salary, health information, contact details, and work records. Swiss law does not require a separate data protection clause in every employment contract, but transparency is mandatory.
A data protection clause in your contract explains *what* data you collect, *why* you collect it, *how long* you keep it, and *what rights* the employee has. This prevents misunderstandings and demonstrates good faith compliance. Employers without clarity on data handling often face employee requests they cannot answer quickly.
What revDSG Requires: The Legal Baseline
Under revDSG, any employer processing employee data must act as a lawful data controller. You must have a legitimate reason (lawful basis) to collect salary details, address, health data, or performance records. Employment contracts, payroll law, and occupational safety create most legitimate bases—but you must be explicit about them.
The law does not mandate consent for data processing in employment relationships; the employment contract itself is the lawful basis. However, you must inform employees about data practices in a transparent, accessible way. Many cantons and industry associations (GAV signatories) have additional data retention expectations.
- Lawful basis: Most employment data processing is justified by contract performance, legal compliance (tax, social insurance), and occupational health.
- Transparency obligation: Employees must know you collect address, phone, email, salary, tax ID, and social insurance details—and for what purpose.
- Retention periods: No single legal rule; set periods aligned with tax law (7 years for payroll records) and industry norms for your canton.
- Employee rights: Workers can request access to their data, correction of errors, and explanation of automated decisions (if any).
- Third parties: If you share data with payroll processors, accountants, or insurers, employees must know this.
- No explicit consent needed: Employment context provides lawful basis; separate consent clauses are often unnecessary but may be used for specific uses (e.g., background checks).
Reasonable Template and Structure
A practical data protection clause sits in your contract or as a separate notice and covers: categories of data collected, purpose, retention period, recipients, and employee rights. Keep language plain and avoid legal jargon; this builds trust and clarity.
Most Swiss SMEs use a short addendum (1–2 pages) rather than embedding data terms throughout the contract. Reference your canton's data protection authority website—many provide model templates. If you use external payroll or HR software, your vendor usually has standard language you can adapt.
- Categories: Personal identification, contact, employment contract, salary, tax/social insurance, health/absence data, performance records.
- Purpose: Payroll processing, tax compliance (Quellensteuer), social insurance (AHV/ALV), occupational safety, and internal management.
- Retention: Payroll records 7 years (per tax law); personnel file 3–5 years after departure (aligned with GAV norms in your sector); absence/health data only as long as relevant.
- Recipients: Internal finance/HR teams, external payroll processor, accountant, insurance broker, cantonal tax authority, unemployment office (RAV/ORP/URC if applicable).
- Rights: Employee may request copy of their data, correct inaccuracies, or ask why automated decisions (if any) were made. Provide response within 30 days.
- Data security: Describe basic safeguards—password-protected files, encrypted emails, restricted access—appropriate to your company size.
Common Mistakes That Trigger Disputes
The biggest error is silence: saying nothing about data practices, then surprising an employee when they discover you retain health records or share payroll with a third party. Employees feel deceived, trust erodes, and if data is mishandled, they have grounds to complain to cantonal authorities.
A second mistake is over-collecting without purpose. If you ask for date of birth, citizenship, or spouse's name without a real business need, you violate the data minimization principle—revDSG requires you to collect only what you need. Courts and data protection officers increasingly scrutinize this.
- Silence on data recipients: Employer processes payroll via third party, employee never told, finds out by accident. Complaint to cantonal DPA (Datenschutzbeauftragte) follows. Always name external processors upfront.
- Unclear retention: No stated end date for storing personnel files. Employee worries you keep old medical notes or complaints indefinitely. Legal standard is 3–5 years after departure; state it clearly.
- Consent confusion: Employer asks employee to 'consent' to data processing required by law (e.g., tax withholding). This is not true consent—it's mandatory. Miscasting legal obligations as optional weakens your credibility.
- Health data mishandling: Storing COVID absence records, disability notes, or medical certificates in shared drives or mixing with payroll. Restrict to need-to-know staff; separate files if possible.
- No employee-rights acknowledgment: Failing to tell employees they can request a copy of their data or ask questions. This is a right under revDSG; ignoring it invites formal requests and frustration.
- Vague purpose statements: Writing 'data used as needed for business purposes' is too broad. Link data use to specific lawful bases: contract, law, safety, or legitimate interest with clear explanation.
Frequently asked questions
- Do I need a separate data protection clause, or can I add it to the employment contract?
- Either is fine. Many Swiss SMEs add a short 'Data Protection & Privacy' section to the contract itself or attach a one-page notice. What matters is clarity and accessibility—the employee must understand your practices without hunting through a manual. If your contract is already dense, a separate, titled addendum often reads better.
- Can I ask for explicit consent to process employment data?
- You can, but you don't need to. The employment relationship itself justifies data processing (contract performance, legal compliance). If you ask for consent, employees may feel pressured—especially new hires—since refusing means not taking the job. Use consent only for optional data uses (e.g., marketing communications, photo in company newsletter), not for core payroll or tax data.
- How long must I keep employee data after someone leaves?
- Payroll records: 7 years (tax law). Personnel files (contracts, reviews, references): 3–5 years after departure is standard in Swiss practice and most GAV agreements. Health/absence data: delete or anonymize once no longer needed (typically 1–2 years). Your accountant and canton's tax office can clarify specifics for your situation.
General information for Swiss employers, not legal advice. Have a lawyer confirm anything with legal consequences.