The updated Federal Act on Data Protection (nFADP), along with the implementing clauses in the Federal Act on Data Protection (DPO) and the Ordinance on Data Protection Certificates, will go into effect on September 1, 2023. (DPCO). Although the fundamentals of data protection are largely unchanged, businesses are now subject to a variety of new requirements. The performance of data protection impact assessments, the documentation of data processing operations, the adoption of privacy by design, and the notification of data security breaches are a few examples of these requirements. The criminal penalties for natural people have likewise been dramatically tightened. Lets highlight the new obligations for companies and the consequences of non-compliance.