GDPR and the DSG for software teams in Liechtenstein
Liechtenstein is not an EU member state. It is one of the three EEA EFTA States, with Iceland and Norway, and the EEA Agreement gives it access to the EU internal market but not the customs union, the common trade policy or monetary union. The EEA Joint Committee decision incorporating the GDPR entered into force on 20 July 2018, and the regulation has applied there since. The national Datenschutzgesetz (DSG) of 4 October 2018, in a consolidated version in force since 1 April 2026, makes the Datenschutzstelle the supervisory authority and sets fines in Swiss francs: up to CHF 11 million or 2% of worldwide annual turnover, and up to CHF 22 million or 4% for the most serious breaches. For a development partner the useful reading is a design brief: who can see production data, from where, on what basis.





