FinSA Switzerland: scope, clients and conduct

What FinSA covers: the scope of the Swiss Financial Services Act

The Financial Services Act (FinSA, SR 950.1), which entered into force on 1 January 2020, sets the conduct framework for any person providing financial services on a commercial basis in Switzerland. The Act defines "financial services" broadly. The definition includes the acquisition or disposal of financial instruments, the transmission and acceptance of orders relating to financial instruments, asset management for individual clients, investment advice, and the custody of financial instruments. It also reaches lending against financial instruments as a security. The breadth of that definition matters: activities that might seem ancillary in other markets can constitute financial services under Swiss law and bring a provider directly within its scope.

The Act is paired with the Financial Institutions Act (FinIA, SR 954.1), which governs the authorisation and supervision of financial institutions (portfolio managers, trustees, fund management companies and securities firms). FinSA and FinIA are complementary: FinIA determines who needs a FINMA licence; FinSA governs how the service is conducted once the provider is active, whether supervised or not. A provider may need both a FinIA licence and FinSA compliance; it may need FinSA compliance alone (without a licence) if it advises but does not manage assets; or, in limited cases, it may fall outside both. Getting the placement right is the first question, not the last.

The Act also operates alongside the Anti-Money Laundering Act (AMLA, SR 955.0). AML obligations attach to financial intermediaries through the AMLA and their SRO or supervisory organisation affiliation; FinSA adds the conduct and investor-protection layer on top. A provider navigating Swiss financial regulation typically encounters all three statutes, and the review of the FINMA licence categories is a useful starting point to place the activity correctly before addressing the FinSA obligations in detail.

Foreign providers and the cross-border reach of FinSA

FinSA does not stop at the Swiss border, and a large part of its practical significance lies in how it catches foreign providers serving Swiss clients. A provider incorporated and supervised in Germany, the United Kingdom or the United States does not escape FinSA simply because it holds a home-country authorisation. Where its advisers actively serve clients in Switzerland, the Swiss conduct rules apply to those relationships. This is a deliberate design choice: Switzerland has no passporting arrangement with the EU or any other jurisdiction, so there is no mechanism by which a foreign licence substitutes for Swiss compliance.

The critical consequence for foreign providers concerns the client adviser register. Under arts. 28–30 of FinSA, advisers of non-FINMA-supervised providers who serve clients in Switzerland must be entered in the register before providing the service. A foreign group supervised in its home country is, from a Swiss-law perspective, a non-supervised provider unless it also holds a Swiss FINMA authorisation. Its advisers who call on, write to, or otherwise actively serve Swiss retail clients are therefore generally subject to the registration duty. The home-country supervision is relevant to the extent that it shapes the knowledge and expertise a particular adviser can evidence, but it does not replace the Swiss register entry.

The exemption for providers serving only professional or institutional clients in Switzerland is real but narrow: it requires the client base to be genuinely restricted to those categories, and any retail engagement pulls the full set of obligations back in. Cross-border structures that route Swiss retail clients through a professional-client wrapper, without meeting the substantive conditions for that classification, do not achieve the exemption in practice. The analysis of a cross-border arrangement is therefore primarily a client-base question, not a provider-domicile one.

FinSA client segmentation: retail, professional and institutional clients

FinSA client segmentation is the foundation of the conduct regime: every obligation the Act imposes is calibrated to the client's category, and misclassification means either under-protecting a retail client or over-burdening a relationship where lighter rules would lawfully apply. The Act creates three categories: retail clients, professional clients and institutional clients (as of July 2026).

Retail clients are the default category. Any client who does not qualify as professional or institutional is retail, and retail clients receive the fullest package of protection under the Act: the most detailed pre-service information, appropriateness and suitability assessments for advisory services, and the most complete documentation and reporting obligations. The law treats retail clients as the group least equipped to assess the risks of financial products and advice without external safeguards, and the rules are written accordingly.

Professional clients are entities and individuals that meet the conditions set out in the Act for that designation. The category includes regulated financial institutions (banks, insurance companies, securities firms, fund management companies, central banks), large companies that meet size thresholds under the Act, and certain high-net-worth individuals and institutional investors. Professional clients are treated as more capable of assessing risks and negotiating terms, so the provider's information, suitability and documentation duties are reduced for these relationships, though not eliminated.

Institutional clients are a subset of professional clients. They are typically supervised financial intermediaries, central governments and central banks, and national and supranational institutions. The conduct obligations are lightest for this category: for services provided exclusively to institutional clients, several of the most onerous retail-protection rules do not apply.

The Act also provides for opting in both directions. A retail client who meets the conditions set out in the Act may elect in writing to be treated as a professional client, accepting reduced protection in exchange for lighter obligations on the provider's side. The election is the client's to make, the provider must hold the written confirmation, and the conditions are substantive, not formal. Conversely, a professional client may elect to receive retail-client protection for all or part of its relationship with a particular provider. The opting regime is not a discretionary label: if the conditions are not met, or the election was not properly documented, the default category governs.

From a compliance perspective, the classification logic has to be built into the onboarding and relationship-management process. A provider that classifies its clients informally, or relies on the counterparty's own assertion without documentation, is operating without the framework the Act requires. The classification also feeds directly into whether the adviser registration duty applies: where a provider serves only professional or institutional clients, the registration requirement for advisers may fall away.

Rules of conduct and documentation duties under FinSA

The FinSA rules of conduct govern every stage of the client relationship from the initial contact through the delivery and documentation of advice. The Act imposes four main sets of duties on financial service providers: information duties, an appropriateness or suitability assessment, documentation and account-keeping, and client reporting.

Information duties require a provider to inform clients, before providing the service, about the provider itself (including its name, registered seat and regulatory status), the nature and risks of the financial services to be provided, and the costs and charges. The level of detail required is highest for retail clients and reduced for professional clients; institutional clients may by agreement waive certain information requirements.

Appropriateness and suitability assessments are the substantive heart of the conduct regime. For any advisory service, the provider must assess whether the service is appropriate for the client given their knowledge and experience. Where advice is personalised or takes account of the client's overall portfolio or financial situation, a fuller suitability assessment is required: the provider must also assess whether the service is consistent with the client's financial situation and investment objectives. If an assessment cannot be completed because the client has not provided the necessary information, the provider must inform the client and may not give the advice. These are not tick-box exercises: they are ongoing duties that govern how advice is actually structured and delivered.

Documentation is the discipline that makes the conduct rules enforceable. The provider must document the services agreed with each client, the reasons for any advice given, and the information the assessment was based on. The documentation must be retained and made available to the client on request. In practice, a provider that gives advice but keeps no record of the basis for it is in breach of the Act even if the underlying advice was sound.

Running the conduct regime on an ongoing basis, rather than standing it up once at the point of registration, is where the real operational work sits. Our ongoing compliance retainer carries the FinSA conduct function month to month for providers who need a structured, sustained compliance operation behind their advisory activity.

The client adviser register under arts. 28–30 of FinSA

The client adviser register is the access condition that FinSA places between a non-supervised provider and the Swiss market: an adviser of such a provider may not provide financial services to clients in Switzerland until they are entered in the register. The register is maintained by independent registration bodies that are themselves licensed and overseen by FINMA. The register is public, so clients can verify that the person advising them is entered and has met the required conditions.

Four conditions must be met for entry. First, the adviser must demonstrate sufficient knowledge of the FinSA rules of conduct and the necessary expertise for the activity they will carry out. Knowledge is evidenced by appropriate training; the registration body assesses what is required for the specific service. Second, professional indemnity insurance covering loss arising from a breach of the FinSA duties, or equivalent financial security, must be in place. The minimum level is in the order of CHF 500,000 per year, rising as the number of advisers increases, up to a ceiling of around CHF 10 million for larger teams. Third, the provider must be affiliated with a recognised ombudsman before the adviser can be registered. Fourth, the adviser must have no entry in the criminal register for relevant offences and no prohibition from the activity.

The registration duty applies to: advisers of independent, non-FINMA-supervised providers; advisers of advisory-only firms operating outside the FinIA licence; and advisers of foreign providers whose activities bring them within the Swiss registration regime. Advisers of FINMA-supervised institutions (licensed banks, securities firms, licensed portfolio managers and trustees) are generally exempt, because FINMA's ongoing supervision of those institutions serves the same investor-protection function that the register performs for non-supervised providers.

Registration is not a substitute for a FINMA licence, and conflating the two is a recurring error. Entry in the register does not authorise any regulated activity; a provider whose activity constitutes asset management with discretion requires a FinIA licence regardless of whether its advisers are registered. The two obligations are independent and can coexist: an adviser may need to be registered and the provider may also need a licence. In our advisory practice we place the activity correctly against both regimes at the outset, so neither obligation falls through the gap between them.

Ombudsman affiliation: the standing obligation behind registration

The ombudsman requirement under FinSA is both a gate to the client adviser register and a continuing obligation of the provider. Every financial service provider whose advisers serve private clients must be affiliated with a recognised ombudsman body. The ombudsman is an independent, neutral mediation authority that clients can contact if a dispute arises with their provider, providing an out-of-court route before any litigation. The ombudsman must be one recognised by the Federal Department of Finance.

Affiliation is a precondition for the adviser's registration: a registration body will not enter an adviser whose provider has not completed the affiliation. Beyond registration, the affiliation obligation persists: the provider must inform every client of its ombudsman affiliation before commencing the service, and the affiliation must remain current. A lapse in affiliation is not merely a registration defect; it is a substantive breach of the Act's ongoing conduct requirements.

The mechanics of affiliation are straightforward to arrange but easy to overlook in the rush to meet a registration deadline, particularly for foreign providers new to the Swiss market. The ombudsman fees are relatively modest and the process is well-defined. The consequence of overlooking it, however, is that the advisers cannot be registered and the service cannot lawfully commence. We arrange the affiliation as part of the registration project and include its renewal in the ongoing compliance scope where we run the function.

FinSA vs MiFID II: a comparison for providers in both markets

FinSA and the EU's Markets in Financial Instruments Directive II (MiFID II) share the same investor-protection objectives but are built on different regulatory architectures. For any provider active in both Switzerland and EU or EEA member states, the two regimes operate in parallel with no mutual recognition: compliance with MiFID II does not satisfy FinSA, and vice versa. The table below sets out the principal differences as of July 2026.

For a provider structured in, say, London or Frankfurt that serves clients across both markets, the absence of passporting means every Swiss engagement must be assessed against FinSA independently. The MiFID II conduct framework, the client classification and the transaction records do not travel: the Swiss conduct file, the Swiss client classification and the Swiss register entry have to be built and maintained separately. The FinSA and MiFID II obligations overlap in their purpose but do not overlap in their execution.

When FinSA does not apply: limits and boundaries

FinSA is not an unlimited conduct overlay on every financial transaction in Switzerland. The Act contains several defined limits, and understanding them is as important as understanding the scope, because relying on an exemption that does not apply is its own compliance failure.

Advisers of FINMA-supervised institutions are generally exempt from the registration duty under arts. 28–30. The rationale is that FINMA's ongoing supervision of those institutions already provides the investor-protection function the register is designed to achieve for non-supervised providers. Banks, securities firms, licensed portfolio managers and licensed trustees under the FinIA therefore do not need to register their advisers in the client adviser register. The exemption applies to the registration duty; the FinSA conduct rules (information, appropriateness/suitability, documentation) still apply to those institutions' client relationships.

Services to professional or institutional clients only. Where a provider serves exclusively professional or institutional clients in Switzerland, the registration duty for its advisers does not apply. Several of the heavier retail-protection conduct obligations also fall away. This exemption requires the client base to be genuinely and verifiably restricted to those categories. A mixed client base, even if predominantly professional, brings the retail-client rules back in for every retail engagement.

Activities outside the "financial services" definition. Not every financially related activity is a financial service within the meaning of the Act. Legal advice on financial structures, tax advice, general corporate advisory work, and activities that are purely administrative or operational may fall outside the definition. The line is not always clear, and activities that are presented as advisory in nature are often assessed by the registration bodies and FINMA against the substance of what is actually done, not the label applied to it.

Transactions between professional principals. Where two parties enter into a financial transaction operating in a principal capacity, outside any client-advisory relationship, the FinSA conduct duties may not apply. This covers certain interbank and institutional transactions where no advisory service is being provided to a client. The exemption is narrow and fact-dependent: the absence of a stated advisory relationship does not by itself place a transaction outside the Act if the substance of what one party is doing is advising the other.

The limits and boundaries are assessed on the facts of each situation. A provider that designs its arrangements to stay within an exemption must ensure the facts support the analysis: a structure that depends on a classification or relationship characterisation that does not hold in practice gives no real protection.

How FinSA compliance is structured in practice

The compliance obligations under FinSA are not a one-time project but a continuous operating framework. The starting point is always the scope analysis: which activities constitute financial services, which clients are in which category, whether advisers must be registered, and whether a FinIA licence is also required. Getting that mapping right before going to market is materially easier than correcting it after advising clients without a registration or operating without the appropriate classification framework.

Once the scope is confirmed, the work divides into three streams that run in parallel: building the conduct, classification, suitability and documentation framework that governs every client interaction; arranging the professional indemnity cover and ombudsman affiliation that are conditions of registration; and completing the registration with the appropriate registration body for each adviser within the duty. The register entry is the visible confirmation of a working compliance set-up; it is not, on its own, a substitute for the framework behind it. A frequent error among providers active in both Switzerland and the EU is building the classification and suitability documentation to MiFID II specifications and assuming the Swiss file is thereby covered: it is not, and the FinSA conduct obligations run independently of whatever the MiFID II file contains.

In our advisory practice, we structure FinSA engagements so the conduct framework is operational from the day the first Swiss client is served, with the register entry reflecting a compliance set-up that actually runs rather than a form filed in advance. For foreign providers in particular, where the cross-border scope analysis has to precede everything else, we assess the position against Swiss law first and then build the registrations and framework to match the confirmed obligation.