A Five-Year Enforcement Arc Ends in Basel
On June 22, 2026, Switzerland's Federal Administrative Court (Bundesverwaltungsgericht) dismissed the final appeal by Inkasso-Team AG, a Basel-based debt collection firm, ending a dispute that stretched back to a first regulatory warning in September 2021. The court's ruling in case A-3891/2025, announced by the Federal Data Protection and Information Commissioner (FDPIC/EDÖB) on August 20, 2026, upholds the FDPIC's April 28, 2025 order that Inkasso-Team's website, Schuldner-finden.com, be shut down and the personal data it published be deleted (edoeb.admin.ch). The site is now offline, and the court ordered Inkasso-Team to pay CHF 5,000 in procedural costs (SwissCybersecurity.net).
What the Site Did
Schuldner-finden.com was not a conventional collection tool. It published names and identifying details of people Inkasso-Team classified as "alleged debtors," soliciting tips from the public to locate them, and — per the FDPIC's findings — used the listing as a public warning mechanism to third parties. The FDPIC's investigation found the practice breached the transparency and proportionality principles in Article 6 of the revised Federal Act on Data Protection (nFADP/DSG), the information duties in Article 19, and lacked any of the justification grounds under Article 31 — neither consent from the individuals nor an overriding public or private interest (edoeb.admin.ch).
The Case for the Practice
Before dismissing it, the strongest version of Inkasso-Team's position deserves a fair hearing. Locating debtors who have moved without a forwarding address is a genuine, mundane operational problem for any collection agency, and Switzerland's debt-enforcement system (SchKG) depends on creditors being able to serve notice. A public appeal for information is, in principle, a cheaper and faster tool than private investigators or formal address-tracing requests to cantonal registries. There is also a broader policy argument, echoed in consumer-protection circles, that visibility can pressure payment where legal enforcement is slow — the same logic that underlies public court-judgment registries in other jurisdictions.
That argument, however, describes a system with safeguards Schuldner-finden.com did not have. A court judgment registry publishes adjudicated debts, entered by a judge, with defined retention periods and a right of correction. Inkasso-Team's site published unproven allegations — the FDPIC's decision repeatedly uses the qualifier "alleged" — with no equivalent judicial filter, apparently indefinite retention, and a stated function of warning the public rather than merely locating an address. Those are two different products wearing the same label, and only one of them survives a proportionality test.
Why Proportionality Cuts the Right Way Here
This is a case where privacy enforcement and this publication's free-expression instincts converge rather than conflict. Genuine investigative journalism identifying wrongdoing enjoys real protection under nFADP Article 31's public-interest override precisely because it serves accountability functions that a private commercial shaming list does not. Inkasso-Team was not reporting; it was pressuring, using data collected for one purpose (debt recovery) for another (public deterrence) without the consent or judicial finding that would justify it. The FDPIC did not ban debtor-location services, credit databases, or public shaming of adjudicated fraud — it targeted a specific mechanism that skipped adjudication entirely. That is a narrow, correctly-scoped intervention, not a broad content restriction that should worry publishers or legitimate credit bureaus.
The Regulatory Signal
The practical significance is less about this one company than about the nFADP's teeth two-and-a-half years after its September 2023 entry into force. The FDPIC first flagged Inkasso-Team's practice in 2021, under the old law, and it took a formal 2025 order plus a full appeal cycle to a specialized federal court to force compliance — roughly five years start to finish. That is not a regulator moving fast and breaking things; it is closer to the deliberate, evidence-tested process critics of aggressive EU-style enforcement often ask for. Swiss courts applied the proportionality principle that has always anchored Swiss data protection law rather than inventing new obligations, and a private company had a full opportunity to argue its case at every stage.
What to Watch
Other Swiss debt collection and "tracing" services should treat this as clarifying precedent: locating a person is lawful; publicly shaming an unproven allegation to pressure repayment is not, absent consent or a genuine overriding interest. The FDPIC's own August 20 announcement frames the ruling as confirming its enforcement practice rather than breaking new legal ground (edoeb.admin.ch), and the Steiger Legal commentary on a related June 2026 EDÖB warning to another website operator suggests this is now a pattern the regulator is actively policing, not a one-off (Steiger Legal). For a publication that generally argues against over-broad data rules, this is the useful counter-example: proportionality-based enforcement, applied to a narrow and genuinely harmful practice, with due process intact throughout.