Switzerland to Introduce New Cybersecurity Act by June 2027

• •Federal Council plans a new Cybersecurity Act by June 2027.
• •The Act will consolidate three key cybersecurity motions into one legislation.
• •Binding requirements will be imposed on digital product manufacturers and cloud providers.

On September 25, 2026, the Federal Council of Switzerland announced plans to draft a Federal Act on Cybersecurity, aiming for completion by June 2027. This new legislation will consolidate three parliamentary motions related to the cyber resilience of digital products, data protection, and the role of hosting and cloud providers. The National Cyber Security Centre (NCSC) is tasked with developing this standalone Cybersecurity Act (CySA). The Act will impose binding requirements on manufacturers and distributors of software and hardware, including market surveillance and a ban on insecure products. It will also transfer the obligation to report cyberattacks on critical infrastructure from the Information Security Act (ISA). The legislation is designed to minimize administrative burdens while enhancing cybersecurity across various sectors. Existing regulations will remain in force, and the new Act will allow for future technological developments to be incorporated seamlessly.