Back

The wave is coming

The real cost of a data protection incident

Not just fines — but everything behind them.

2018GDPR in effect
Sept. 2023nDSG in effect
March 2025First Swiss fine
?Next case?

Real cases — not a worst-case scenario

Switzerland · March 2025nDSG · Personal Liability

TX Group AG / 20 Minuten

CHF 1,030

Corporate lawyer fined for incomplete disclosure under nDSG Art. 25

First known Swiss case. Not the company — the individual.

Estonia · 2024GDPR · Data Breach

Apotheka Loyalty Program

€3 million

750,000 data subjects. Health data. No MFA, no monitoring.

Not a tech giant. A loyalty program — like many associations run.

Germany · 2025GDPR · Process Control

Vodafone GmbH

€45 million

No attack. Just insufficient internal data protection controls.

Missing documentation and processes are sufficient for a violation.

Sources: Steiger Legal, Estonian DPA, BfDI. Simplified presentation.

Calculate your risk

CHF 2 Mio.
CHF 500kCHF 200 Mio.
25
5500

I am (optional)

nDSG Personal Liability

CHF 10'000 – CHF 100'000

Liability as a natural person, max. CHF 250,000 (nDSG Art. 60)

GDPR Fine (estimated)

Not applicable — no EU citizen data

Hidden costs in an incident

Total Exposure

CHF 340'000

Worst-case maximum across all cost items

What you spend today

What Swiss SMEs currently spend on GDPR compliance

📋External consultant: CHF 15,000–40,000 / year (one-time analysis, outdated after 12 months)
Internal effort: CHF 8,000–20,000 / year (hours taken away from core business)
🤖No AI support: Manual. Slow. Expensive.

This process is not scalable. And it becomes less valuable every day.

ComplianceCore

Founder pricing

Always up to date. Ready to use immediately. Active from the first hour.

Compliance process included — no external consultant needed
Multi-entity: holding, association, cooperative — all in one tool
AI Copilot (coming soon) — questions answered, risks identified

The first 20 customers shape the product — at founder pricing with no price increase for 24 months.

Secure beta access

Estimated values are based on simplified models. Not legal advice.

This page is for informational purposes and does not constitute legal advice.