Patient data in Switzerland

Patient data is sensitive personal data, and physicians together with their auxiliaries are bound by professional secrecy under Art. 321 of the Swiss Criminal Code — breaching it is a criminal offence. Hosting abroad is therefore not automatically forbidden, but the vendor becomes an auxiliary and must be contractually bound just as strictly. Establish in writing where the data resides, which subprocessors are involved and whether a foreign authority could compel access.