Data and digital operations · France and Switzerland : separate country-labelled rules
International data transfers: map the safeguards
International data-transfer review follows the actual recipients and destinations, not just a hosting label. France and Switzerland apply their own adequacy and contractual-safeguard frameworks. Identify onward transfers, the instrument relied upon, completed annexes and additional measures. A general processor contract and an unchanged set of EU clauses do not, by themselves, answer every country-specific transfer question.
- Official texts cited
- Sources checked on
- Drafted with AI assistance, our method
General legal information with official references and dated checks. It is not personalised advice: for a decision that commits you, have your situation checked by a qualified professional.
Julie by AlphaDeep
Does Europe define the legal perimeter?
France's GDPR ChapterV and Switzerland's LPD16 use different tests. Identify the applicable regime before assessing destinations.
Read the referencesYour question concerns “International data transfers: map the safeguards”. I can help organise the facts and records. Which document have you received or prepared, and is this a French or Swiss matter?
3 free questions at signup. Avoid names and sensitive information.
Which international data flow needs mapping?
Identify exporter, importer, data, remote access and onward recipients. A provider's headquarters do not describe every destination.
RGPD, article 44: Principe des transfertsRGPD, article 46: Garanties appropriées235.1 : Art. 16 Principes235.1 : Art. 19 Devoir d’informer lors de la collecte de données personnellesCNIL : RGPD, chapitre V
Which records are still missing from your file?
Indicate which records you have. The result identifies gaps and prepares a complete question for Julie, without requiring an account.
Fictional example · Your preparation
Point to complete: Annexes and measures. Compare parties, roles, data categories, purposes, recipients and measures against the real flow. An empty annex provides no useful factual match.
- Data flows and recipients
- Record available
- Destination countries
- Record available
- Mechanism relied upon
- Record available
- Annexes and measures
- Needs checking
- Records indicated
- 3 / 4
- What should the contractual annexes describe?
This worksheet organises records; it does not establish admissibility, entitlement or a procedural outcome.
Does Europe define the legal perimeter?
France's GDPR ChapterV and Switzerland's LPD16 use different tests. Identify the applicable regime before assessing destinations.
Which transfer mechanism is being relied upon?
Separate adequacy, appropriate safeguards and any claimed exception. A signed contract alone does not establish either country's transfer conditions.
Which documents answer which questions?
| Record or information | Issue to check |
|---|---|
| Data flows and recipients | Identify exporter, importer, data, remote access and onward recipients. A provider's headquarters do not describe every destination. |
| Destination countries | France's GDPR ChapterV and Switzerland's LPD16 use different tests. Identify the applicable regime before assessing destinations. |
| Mechanism relied upon | Separate adequacy, appropriate safeguards and any claimed exception. A signed contract alone does not establish either country's transfer conditions. |
| Annexes and measures | Compare parties, roles, data categories, purposes, recipients and measures against the real flow. An empty annex provides no useful factual match. |
RGPD, article 44: Principe des transfertsRGPD, article 46: Garanties appropriées235.1 : Art. 16 Principes235.1 : Art. 19 Devoir d’informer lors de la collecte de données personnellesCNIL : RGPD, chapitre V
What should the contractual annexes describe?
Compare parties, roles, data categories, purposes, recipients and measures against the real flow. An empty annex provides no useful factual match.
What does GDPR46 require for the French side?
Its safeguards operate alongside enforceable rights and effective remedies. The clause title alone does not establish their fulfilment.
RGPD, article 44: Principe des transfertsRGPD, article 46: Garanties appropriées235.1 : Art. 16 Principes235.1 : Art. 19 Devoir d’informer lors de la collecte de données personnellesCNIL : RGPD, chapitre V
Which official provision helps explain this situation?
Un transfert, vers un pays tiers ou à une organisation internationale, de données à caractère personnel qui font ou sont destinées à faire l'objet d'un traitement après ce transfert ne peut avoir lieu que si, sous réserve des autres dispositions du présent règlement, les conditions définies dans le présent chapitre sont respectées par le responsable du traitement et le sous-traitant, y compris pour les transferts ultérieurs de données à caractère personnel au départ du pays tiers ou de l'organisation internationale vers un autre pays tiers ou à une autre organisation internationale. Toutes les dispositions du présent chapitre sont appliquées de manière à ce que le niveau de protection des personnes physiques garanti par le présent règlement ne soit pas compromis.
In plain English: Its safeguards operate alongside enforceable rights and effective remedies. The clause title alone does not establish their fulfilment.
Is a destination or certification approved here?
No current country list or provider certification is verified by this worksheet. Swiss Federal Council adequacy and EU Commission adequacy must not be conflated.
RGPD, article 44: Principe des transfertsRGPD, article 46: Garanties appropriées235.1 : Art. 16 Principes235.1 : Art. 19 Devoir d’informer lors de la collecte de données personnellesCNIL : RGPD, chapitre V
How should onward transfers be examined?
Record further recipients, destinations and the mechanism for each step. The first agreement does not automatically cover every downstream transfer.
What belongs in the review package?
Bring the flow map, mechanism, completed annexes and unresolved measures. Swiss information duties and French GDPR obligations require their own checks.
What other questions arise in this file?
Does Europe define the legal perimeter?
France's GDPR ChapterV and Switzerland's LPD16 use different tests. Identify the applicable regime before assessing destinations.
RGPD, article 44: Principe des transfertsRGPD, article 46: Garanties appropriées235.1 : Art. 16 Principes235.1 : Art. 19 Devoir d’informer lors de la collecte de données personnellesCNIL : RGPD, chapitre V
What should the contractual annexes describe?
Compare parties, roles, data categories, purposes, recipients and measures against the real flow. An empty annex provides no useful factual match.
RGPD, article 44: Principe des transfertsRGPD, article 46: Garanties appropriées235.1 : Art. 16 Principes235.1 : Art. 19 Devoir d’informer lors de la collecte de données personnellesCNIL : RGPD, chapitre V
What does GDPR46 require for the French side?
Its safeguards operate alongside enforceable rights and effective remedies. The clause title alone does not establish their fulfilment.
RGPD, article 44: Principe des transfertsRGPD, article 46: Garanties appropriées235.1 : Art. 16 Principes235.1 : Art. 19 Devoir d’informer lors de la collecte de données personnellesCNIL : RGPD, chapitre V
How should onward transfers be examined?
Record further recipients, destinations and the mechanism for each step. The first agreement does not automatically cover every downstream transfer.
RGPD, article 44: Principe des transfertsRGPD, article 46: Garanties appropriées235.1 : Art. 16 Principes235.1 : Art. 19 Devoir d’informer lors de la collecte de données personnellesCNIL : RGPD, chapitre V
Which official references should you consult?
- RGPD, article 44: Principe des transfertsSource officielle
- RGPD, article 46: Garanties appropriéesSource officielle
- 235.1 : Art. 16 PrincipesFedlex
- 235.1 : Art. 19 Devoir d’informer lors de la collecte de données personnellesFedlex
- CNIL : RGPD, chapitre VSource officielle
Texts cited last checked: 1 November 2026