Proton CEO Warns: Swiss Surveillance Law Threatens Democracy

Swiss Tech Giant Proton Begins Server Exodus Over Surveillance Fears

Proton, the Swiss-based encrypted email and privacy services provider, has started moving its infrastructure out of Switzerland in response to proposed surveillance legislation that CEO Andy Yen warns could transform the country into a 'police state.' The company, which boasts over 100 million users worldwide, is relocating servers to Germany and Norway as a precaution against the revised Ordinance on Surveillance of Postal and Telecommunications Traffic (VÜPF).

The Controversial VÜPF Revision

The Swiss Federal Council, led by Justice Minister Beat Jans, proposed revisions to the VÜPF in January 2025 that would significantly expand surveillance capabilities. Under the proposed changes, encrypted service providers like Proton and Threema would be required to identify users, collect metadata including location and communication patterns, and develop automated access portals for law enforcement. 'This would be a massive intrusion into privacy,' Yen told Swiss publication NZZ. 'We're talking about an automated backdoor that could potentially allow every police officer and prosecutor to access our customers' data.'

The proposed regulation creates three categories for derived communications service providers (AAKD), with Proton potentially facing the strictest requirements. Companies with over 1 million users or CHF 100 million in annual revenue would need to implement full monitoring capabilities with technical interfaces for authorities.

Political Backlash and Democratic Concerns

Nearly all major Swiss political parties have rejected the proposed revisions, including the SVP, FDP, GLP, SP, and Greens. Critics argue the measures are disproportionate and exceed legal foundations. On December 10, 2025, the Council of States passed a motion requiring the Federal Council to fundamentally revise the ordinance and conduct another consultation.

Yen expressed particular concern about the democratic process: 'Whoever leaves legislation to the police shouldn't be surprised if they wake up one day in a police state,' he warned. 'The government lost in court previously, and now they're choosing an ordinance to achieve their goal anyway. You can't file a referendum against ordinances, even though this one goes far beyond the legal framework.'

Proton's Response and Infrastructure Shift

Proton has begun duplicating its entire infrastructure, with data now residing on servers in Switzerland, Germany, and Norway. The company can shut down Swiss systems quickly if necessary. 'I always hoped I would never have to take such steps,' Yen said. 'But the environment in Switzerland is currently too uncertain for us. We had no choice but to plan our departure.'

The company has also started hiring more employees outside Switzerland and has moved some existing staff. Proton's new AI assistant Lumo will be the first product to relocate, representing a €100+ million investment into EU infrastructure.

Broader Implications for Swiss Tech

Yen argues the regulation creates unfair competition: 'It's absurd: most countries create barriers for foreign companies, but Switzerland would raise barriers for domestic companies with the VÜPF,' he explained. 'For Proton, the Swiss company, much stricter rules would apply than for Google. And this despite Google also having thousands of employees in Switzerland, marketing its services here, and having even more users than Proton.'

The CEO, a former particle physicist who worked at CERN after earning his PhD from Harvard, founded Proton following Edward Snowden's 2013 revelations about NSA surveillance. The company operates as a non-profit foundation to ensure its mission isn't compromised by business interests.

Security vs. Privacy Debate

While authorities argue the measures are necessary to combat serious crimes like drug trafficking and terrorism, privacy advocates warn about the dangers of mass surveillance. 'Metadata is highly sensitive data and allows far-reaching conclusions about people's lives,' Yen noted, quoting former NSA director Michael Hayden: 'We kill people based on metadata.'

Proton maintains that it already cooperates with law enforcement when legitimate investigations target specific individuals, with about 50 of its 500 employees dedicated to identifying criminal use of its platform. However, the company refuses to implement mass surveillance systems that would compromise all users' privacy.

The situation continues to develop, with the Federal Council expected to decide on the final version of the VÜPF revision in autumn 2025. For now, Proton's partial departure serves as a stark warning about the potential consequences of surveillance overreach in one of Europe's last privacy havens.