As of July 7, 2026, every new car and light van registered in Switzerland must ship with an infrared camera pointed at the driver's face. The Federal Roads Office (FEDRO) confirmed the system — Advanced Driver Distraction Warning, or ADDW — tracks gaze direction and eyelid behavior to warn a distracted or drowsy driver, and stated plainly that footage "will not be stored, but processed in real time within a closed circuit and without the use of biometric identification." Switzerland is not adopting a homegrown rule here. It is importing, largely unchanged, the second phase of the EU's General Safety Regulation — Regulation (EU) 2019/2144 — via the technical standard that took effect for all new EU vehicle registrations the same day.
The Safety Case Deserves a Fair Hearing
Before any critique, the regulator's argument should be stated on its own terms. Switzerland's federal accident-prevention body, BFU, attributes roughly 61 deaths and 1,220 serious injuries a year to distraction and inattention behind the wheel — the single most common cause of road accidents in the country. A camera that catches a driver's gaze drifting to a phone or an infotainment menu before a crash, not after, is a defensible response to a well-documented and specific harm, not a speculative one. Regulators did not invent this problem to justify the camera; the accident data predates the rule by years.
The Design Is Reasonably Careful — On Paper
The underlying EU technical standard, Commission Delegated Regulation (EU) 2023/2590, is more privacy-conscious than the "camera in every dashboard" framing suggests. It requires that ADDW "function without relying on biometric personal data of any vehicle occupants," and that the system "only continuously record and retain data necessary for the system to function and operate within a closed-loop system." That is a real constraint, not a talking point: it forecloses face-matching, off-vehicle transmission, and indefinite retention as a matter of type-approval law, not merely as a manufacturer's voluntary policy. FEDRO's public assurance — that footage is processed and discarded locally — tracks the letter of that rule.
Where the Assurance Runs Out
The gap is verification, not design intent. "Closed-loop, not stored" is a claim about software behavior inside a vehicle's own compute stack — not something a driver, a journalist, or even FEDRO itself can independently observe after the fact. Swiss reporting on the rollout has already surfaced the reason for skepticism: owners have described vehicles from at least one manufacturer transmitting cabin-camera data to servers outside Switzerland, and a Zurich driver who disabled a manufacturer's telemetry reportedly found functions of the car itself curtailed. None of that is alleged to violate GSR2 — the EU standard governs the ADDW type-approval test procedure, not everything else a manufacturer's software stack does with a camera it has already installed for that purpose. That is precisely the loophole proportionate regulation should close: a rule that bars biometric identification inside one narrowly defined system says nothing about what else runs on the same sensor.
Regulation Without Representation
There's a second, quieter issue specific to Switzerland. It is not an EU member state, has no vote in the Council or Parliament, and did not participate in drafting either 2019/2144 or its 2023 implementing rules — yet it adopts the resulting vehicle-safety code near-automatically, because Swiss manufacturers and importers need EU type-approval compatibility to sell cars at all. That is a rational trade for a small, trade-dependent economy, and it is how Swiss vehicle law has worked for decades. But it means the Swiss public is bound by data-processing rules for a camera in their own cars that were negotiated entirely in Brussels. A domestic regulator that imports rules wholesale has a heightened obligation — precisely because it cannot claim authorship — to independently verify that manufacturers comply, rather than repeating the EU's compliance assurances as its own.
The Proportionate Fix Is Audit, Not Alarm
None of this argues for banning driver-monitoring cameras, which the accident data supports, or for treating GSR2 as a surveillance mandate — the biometric-matching prohibition and closed-loop requirement are genuine, enforceable constraints on paper. It argues for FEDRO and its counterparts in EU type-approval authorities to spend less effort restating manufacturer assurances and more on independent, adversarial audits of what ADDW-equipped vehicles actually transmit off-board — the same kind of post-market surveillance regime that already exists for vehicle emissions after the diesel-testing scandals of the last decade taught regulators not to trust self-certification. A camera that behaves exactly as described is a proportionate safety measure. A camera nobody outside the manufacturer can verify is not — and the difference between the two is an audit regime, not a new prohibition.