TLDR: For Swiss SMEs and startups, the real limit on outbound comes from the unfair-competition rule on unsolicited advertising; a sequence built for sender identity, easy refusal, and honest relevance stays lawful and still books meetings.
The nLPD governs your list; the LCD governs your send
Founders in Geneva and Zurich tend to collapse every outbound question into one worry: does the data-protection law let us email strangers? It is the wrong frame. Two separate Swiss statutes apply, and they do different jobs.
The revised Federal Act on Data Protection (nLPD, also known as the FADP), in force since 1 September 2023, regulates the list — how a company collects, stores and uses the personal data behind a prospect’s name and work email. It requires transparency about the processing, a lawful purpose, and it gives every person a right to object to direct marketing. A business contact such as first.last@company.ch is personal data, so the nLPD reaches B2B prospecting even when the target is a company mailbox.
The send itself — the cold email hitting the inbox — falls under the Unfair Competition Act (LCD). Article 3(1)(o) makes mass advertising by email, SMS or automated call unlawful unless three conditions hold together: the recipient gave prior consent, or the message continues an existing customer relationship for similar goods; the sender is clearly identified; and every message carries a free, easy way to refuse further contact. Switzerland’s Federal Office of Communications sets out the three cumulative conditions, and the federal data-protection authority confirms the same opt-in default for email advertising.
Swiss law targets “mass” advertising, where individualized outbound earns room
The word that carries the weight in Article 3(1)(o) is Massenwerbung: mass advertising. The prohibition is aimed at automated bulk sending, not at a researched, individual message from one professional to another about a specific business problem. That distinction is where a disciplined SDR (sales development representative) motion operates.
Founders should read it carefully rather than optimistically. Swiss legal analysis notes the law draws no bright line between business and consumer email, and the customer-relationship exception stays narrow. A breach is prosecuted on complaint and can carry, under Article 23 LCD, imprisonment of up to three years or a fine. So the safe posture rejects “1:1 emails are exempt, blast in small batches” and adopts a stricter default: keep every message genuinely individual and relevant, identify the sender, and make refusal one click — the exact hygiene the statute asks of anyone.
The honest benchmark: a 0.45% reply rate, ~1,200 meetings from 7.5 million emails
Compliance and performance pull the same way here, because the Swiss constraints penalize precisely what already fails: volume without relevance. The most transparent recent benchmark comes from the agency Belkins, which measured 7.5 million cold emails sent in 2025 and reported a 0.45% reply rate against total emails sent, alongside roughly 1,200 booked meetings from that volume. Counted honestly — replies over all sends, not over opens — cold email is a low-yield channel that rewards precision and punishes the blast.
| Metric | Figure | Source |
|---|---|---|
| Cold email reply rate (7.5M emails, 2025) | 0.45% | Belkins |
| Meetings booked from that volume | ~1,200 | Belkins |
| Reply-rate uplift, high personalization vs generic | +142% | GrowthList |
| Replies that arrive after the first email | 42% | Instantly |
| Closed deals needing five or more follow-ups | 80% | HubSpot |
The levers that lift those numbers are the compliant ones. Heavily personalized campaigns show a 142% higher reply rate than generic sends, and only a minority of senders personalize at all. Persistence matters as much: 42% of replies arrive after the first message, and most closed deals need five or more follow-ups. None of that calls for a bigger list. It calls for sharper targeting and disciplined operations — the revenue-operations (RevOps) core.
A Swiss-compliant SDR motion, engineered into the sequence
Compliance fails when it lives in a policy document instead of the workflow. Built into the sequence, it turns automatic and invisible:
- Identity in every message. A real sender name, company and reachable address — an LCD requirement and a deliverability gain.
- One-click refusal, honoured instantly. A plain opt-out line in every email, wired to suppress the contact across the CRM (customer relationship management) so a “no” is never touched again.
- Relevance as the entry gate. A contact joins the sequence only with a specific, researched reason — role, trigger or fit — so the message reads as individual rather than bulk.
- nLPD transparency and objection handling. A reachable privacy notice explaining the source and purpose of the data, plus a process that records and respects any objection to marketing.
- Suppression of listed refusals. Screening against the SDV Robinson opt-out register and starred directory entries, which the data-protection authority marks as off-limits for unsolicited approaches.
Run this way, an outbound engine stays auditable: every send names its sender, every prospect carries a documented reason, every refusal sticks. That is what lets a founder scale outreach without inviting an LCD complaint.
What Geneva and Zurich founders should do this quarter
For a post-seed startup: pick one narrow ideal-customer profile, write genuinely individual sequences, and instrument sender identity, opt-out and suppression before the first send. For an established SME (small and medium-sized enterprise) adding outbound to referrals: map the customer-relationship exception to the real base, and keep cold contacts on a separate, fully opt-out-enabled track. For both: treat the consolidated CRM as the system of record where consent, objections and suppression live — outbound discipline is a data-operations problem before it is a sales one.
Pupsic builds these compliant outbound motions for Swiss SMEs and startups: the targeting, the sequence and the RevOps plumbing that keeps a “no” a no. Work with Pupsic to build an outbound engine that respects Swiss law and still fills the calendar.
References
- Belkins. B2B Cold Email Response Rates (2026 study). https://belkins.io/blog/cold-email-response-rates
- Martal Group. B2B Cold Email Statistics 2026 (personalization and follow-up benchmarks, citing GrowthList, Instantly, HubSpot). https://martal.ca/b2b-cold-email-statistics-lb/
- Swiss Federal Office of Communications (OFCOM/BAKOM). When is mass sending allowed? https://www.bakom.admin.ch/en/when-is-mass-sending-allowed
- Federal Data Protection and Information Commissioner (FDPIC). Advertising and marketing. https://www.edoeb.admin.ch/en/advertising-marketing
- Federal Act against Unfair Competition (LCD), SR 241, Art. 3. https://www.fedlex.admin.ch/eli/cc/1988/223_223_223/fr
- Federal Act on Data Protection (nLPD/FADP), SR 235.1, in force 1 September 2023. https://www.fedlex.admin.ch/eli/cc/2022/491/en
- MLL Legal. Email Marketing Compliance: Switzerland. https://mll-legal.com/email-marketing-compliance-switzerland-2/
