How Switzerland Became a Surveillance State Overnight

---

Table of Contents

---

Switzerland’s Federal Council is implementing surveillance laws through executive decree that bypass the country’s famous direct democracy. The VÜPF ordinance update requires any messaging app, VPN, or email service with just 5,000 users to collect government ID, retain IP addresses and metadata for six months, and decrypt communications on demand. Article 50a mandates providers remove encryption they control and deliver data in plain text to authorities. This surveillance regime exceeds what NSA operates under in the United States and violates protections that EU privacy law explicitly guarantees. Proton announced it’s moving over 100 million euros in infrastructure investment from Switzerland to Germany and Norway in direct response. The company’s CEO stated Switzerland’s surveillance would be much stricter than the USA and EU. Threema and Proton both won court cases in 2021 establishing they shouldn’t be classified as telecommunications providers subject to surveillance obligations. The government is now rewriting regulations through ordinance updates to override those victories. Privacy organizations Digitale Gesellschaft and Campax delivered 15,000 signatures opposing the changes to Federal Councillor Beat Jans in August 2025. The proposals could take effect by 2026 without parliamentary approval or public referendum. Switzerland built its reputation as a privacy haven over decades through strong legal protections. Those protections are being dismantled through regulatory changes that avoid democratic oversight. Privacy-focused companies are relocating infrastructure outside Switzerland. Users relying on Swiss jurisdiction for encrypted communications need alternative solutions. The country that refused EU membership to maintain sovereignty now implements surveillance powers that exceed EU authority through executive action alone.

---

Last update on: November 18, 2025