← Back

The wave is coming

The real cost of a data protection incident

Not just fines — but everything behind them.

2018GDPR in effect
Sept. 2023nDSG in effect
March 2025First Swiss fine
?Next case?

Real cases — not a worst-case scenario

Switzerland · March 2025nDSG · Personal Liability

TX Group AG / 20 Minuten

CHF 1,030

Corporate lawyer fined for incomplete disclosure under nDSG Art. 25

First known Swiss case. Not the company — the individual.

Estonia · 2024GDPR · Data Breach

Apotheka Loyalty Program

€3 million

750,000 data subjects. Health data. No MFA, no monitoring.

Not a tech giant. A loyalty program — like many associations run.

Germany · 2025GDPR · Process Control

Vodafone GmbH

€45 million

No attack. Just insufficient internal data protection controls.

Missing documentation and processes are sufficient for a violation.

Sources: Steiger Legal, Estonian DPA, BfDI. Simplified presentation.

Calculate your risk

CHF 2 Mio.
CHF 500kCHF 200 Mio.
25
5500

I am (optional)

nDSG Personal Liability

CHF 10'000 – CHF 100'000

Liability as a natural person, max. CHF 250,000 (nDSG Art. 60)

GDPR Fine (estimated)

Not applicable — no EU citizen data

Hidden costs in an incident

Total Exposure

CHF 340'000

Worst-case maximum across all cost items

What you spend today

What Swiss SMEs currently spend on GDPR compliance

📋External consultant: CHF 15,000–40,000 / year (one-time analysis, outdated after 12 months)
⏱Internal effort: CHF 8,000–20,000 / year (hours taken away from core business)
🤖No AI support: Manual. Slow. Expensive.

This process is not scalable. And it becomes less valuable every day.

ComplianceCore

Founder pricing

Always up to date. Ready to use immediately. Active from the first hour.

✓Compliance process included — no external consultant needed
✓Multi-entity: holding, association, cooperative — all in one tool
✓AI Copilot (coming soon) — questions answered, risks identified

The first 20 customers shape the product — at founder pricing with no price increase for 24 months.

Secure beta access →

Estimated values are based on simplified models. Not legal advice.

This page is for informational purposes and does not constitute legal advice.