LPrD vs LPD: which law applies to you?

The difference is straightforward: the LPrD applies to Vaud public bodies, while the LPD, the federal law, applies to private persons and federal bodies. A municipality falls under the LPrD; a company falls under the LPD.

Both laws share the same principles: processing activities register, impact assessment, breach notification, enhanced protection for sensitive data. But they apply to different actors and designate different supervisory authorities. For Vaud public bodies, the authority is the cantonal commissioner for data protection and transparency. For the private and federal sector, it is the FDPIC. A para-public or mixed entity must determine its classification carefully, as this conditions its obligations.