Convenience Is Not Consent

For years, state-adjacent corporations in Switzerland have quietly tested the boundary between modern efficiency and institutional presumption. Postfinance, the financial subsidiary of Swiss Post, provided a prime example when it introduced an automated voice recognition scheme on its customer hotlines back in autumn 2018. The setup was as sleek as it was problematic: upon placing a call, customers were casually informed via a recorded announcement that their voice would be recorded, linked to their name and telephone number, and stored for future identification. Anyone wishing to avoid this biometric registration was required to actively object to the call centre agent during the conversation.

Unsurprisingly, this opt-out architecture meant that the vast majority of callers ended up with a permanent biometric profile stored in corporate servers. It was an arrangement tailored for operational convenience, resting on the quiet assumption that Swiss consumers are far too accommodating—or distracted—to object to administrative routine.

That illusion of tacit consent has now collapsed. Following a persistent challenge from the Federal Data Protection and Information Commissioner, the Federal Administrative Court ruled that passive notification is legally insufficient when dealing with biometric data. The court acknowledged the commercial logic behind instant voice recognition, agreeing that identifying returning callers by their acoustic footprint saves time and lowers operational costs. Yet, it firmly drew the line against trading individual personality rights for organizational expediency.

The judicial reasoning highlights a crucial distinction about human voice data. Unlike a simple customer number or a static password, a person's voice carries intimate biological and psychological markers. Beyond merely delivering spoken words, it reveals subtle details about health, emotional state, and personal temperament. Allowing corporations to capture such nuanced biometric signatures on a default basis undermines fundamental personal protections.

As a direct consequence of the ruling, Postfinance faces a straightforward choice: it must retroactively obtain explicit consent from every affected customer or scrub the accumulated voice profiles from its systems entirely. While the bank still retains the option to appeal the decision to the Federal Supreme Court, the Administrative Court has established an unambiguous barrier. Corporate efficiency cannot be constructed by quietly stripping away control over one's own biometric identity.

Written by Freya Stensrud freya.stensrud@alpineweekly.com