Analyzing critical legal trends and developments across data, cyber, AI and digital regulations from around the world and beyond borders

On 25 September 2026, the Swiss Federal Council has announced plans to develop a new standalone Cybersecurity Act aimed at strengthening Switzerland’s cyber resilience and creating a more coherent legal framework for cybersecurity. The proposed legislation will consolidate several ongoing legislative projects, including requirements relating to the cyber resilience of digital products, the protection of critical digital data, and cybersecurity obligations for hosting and cloud service providers. It is also intended to incorporate the existing cyber incident reporting obligations applicable to operators of critical infrastructure.

The new framework is expected to align closely with international and European developments, including the EU Cyber Resilience Act, while seeking to minimize the administrative burden on businesses. The Federal Council has tasked the Federal Department of Defence, Civil Protection and Sport (DDPS) with preparing a consultation draft by June 2027.

Author

Johanna Moesch is a senior associate in Baker McKenzie’s Zurich office and a member of the firm’s Commercial, Tech & Transactions as well as Data & Cyber Practice. Prior to joining Baker McKenzie she worked as an associate and senior associate in a major Zurich law firm and prior thereto as a law clerk in a Swiss district court. Johanna obtained a LL.M. degree from the Tsinghua University (Beijing). She is a member of the International Association of Privacy Professionals (IAPP) and since January 2021 a Certified Information Privacy Professional/Europe (CIPP/E).

Author

Eva-Maria Strobel is a Partner in Baker McKenzie's Zurich office, and chairs the Firm's EMEA Intellectual Property, Data & Cyber, Commercial, Tech & Transactions, Regulatory and Trade Practice Groups. With dual qualifications in Switzerland and Germany, she advises clients across industries on the strategic development, protection, and commercialization of intellectual property assets and legal intersections between emerging technologies, artificial intelligence, and data regulation. Eva-Maria regularly contributes to thought leadership on AI and IP, and is a trusted advisor to multinational clients navigating complex regulatory and innovation-driven landscapes.

Author

Christoph Kurth heads the Investigations, Compliance & Ethics practice of the Swiss offices and co-leads the EMEA Financial Institutions Industry Group.