PrivadoVPN has finalized its departure from Swiss jurisdiction, updating its Terms of Service to establish Privado Networks ehf. as a legally registered entity in Garðabær, Iceland - replacing the former Zug-based Privado Networks AG and the Swiss legal framework it operated under. The move, months in the making, is a direct response to Switzerland's proposed expansion of surveillance obligations that would have compelled VPN providers to collect and retain user data. For privacy-conscious users, the distinction matters enormously.
Why Switzerland Lost Its Privacy Reputation
For well over a decade, Switzerland was treated as something close to a sanctuary for digital privacy. Its legal independence from the European Union, strict bank-style confidentiality norms, and comparatively restrained surveillance infrastructure made it the default jurisdiction of choice for privacy-oriented technology companies, PrivadoVPN among them.
That standing began to erode in March 2025, when the Swiss government put forward amendments to its national surveillance laws that would extend mandatory monitoring and data collection obligations to a broad category of "derived service providers." The proposed definition was wide enough to bring VPN services under the same legal umbrella as telecommunications companies - a classification with sweeping consequences. Under telecom-style regulation, a VPN provider can be legally required to log connection data, timestamps, and in some jurisdictions, the content of sessions. That obligation is fundamentally incompatible with a genuine no-logs service.
PrivadoVPN read the trajectory clearly and began planning its exit before the amendments were enacted. The result is a jurisdictional pivot that is now complete in both operational and legal terms.
What Iceland Offers That Switzerland No Longer Can
Iceland's appeal to privacy-focused technology companies is not accidental - it is structural. Icelandic law classifies VPN providers as application-layer service providers, not telecommunications operators. That single legal distinction removes them entirely from the scope of mandatory data retention requirements that apply to telecoms across much of Europe.
The country is not a member of the European Union, which means it sits outside the reach of EU surveillance directives as a matter of sovereignty. At the same time, Iceland maintains a functioning rule-of-law environment, a stable regulatory framework, and a track record of supporting press freedom and digital rights - factors that give the jurisdiction practical credibility, not just theoretical appeal.
PrivadoVPN confirmed its reasoning directly: Iceland treats VPNs as application-layer services rather than telecoms, exempting them from data logging obligations that would otherwise undermine the core function of a privacy service. For a provider whose value proposition rests entirely on not retaining user activity, jurisdiction is not a secondary concern - it is the product itself.
What the New Terms of Service Actually Change
The revised Terms of Service are materially different from the August 2023 version they replace. The updated document is substantially longer, offering detailed sections that define the scope of the service, the obligations of both provider and user, and the legal framework under which disputes would be resolved - now Icelandic law rather than Swiss. The previous document left considerably more room for legal ambiguity. The new version narrows that space deliberately.
One notable addition is an explicit clause stating that PrivadoVPN's 30-day money-back guarantee may be used only once per user. While modest in isolation, the inclusion reflects a broader pattern in the revised document: greater precision, fewer assumptions, and less reliance on informal understanding.
For existing and prospective users, the practical service offering remains unchanged. PrivadoVPN continues to provide a free tier with 10GB of monthly data, an active kill switch, and unthrottled connection speeds - a combination rarely offered without a paid subscription by competing services. Premium subscribers retain access to unlimited data, up to ten simultaneous connections, and servers across more than sixty countries, along with the provider's established ability to unblock major streaming platforms.
The Broader Shift in the VPN Jurisdiction Landscape
PrivadoVPN's relocation reflects a wider pattern developing across the VPN industry. As European and Swiss regulatory frameworks expand their definitions of who counts as a communications provider, jurisdictions that once offered credible legal shelter are becoming less reliable. Switzerland's proposed changes are part of that trend, not an outlier within it.
For users who rely on VPNs to protect their data from both commercial surveillance and state oversight, the legal home of a provider is one of the few claims that can be independently verified. A privacy policy is a document; a jurisdiction is a legal reality with enforceable consequences. By completing this transition, PrivadoVPN has moved its privacy guarantees from the realm of stated intent into binding legal structure - and in doing so, has placed the question of jurisdiction at the center of how privacy services should be evaluated.
