According to the Federal Office for Cyber Security, a cyber incident is reported on average every 8.5 minutes in Switzerland. The number of reported cyber incidents in Switzerland rose sharply in 2024 - almost twice as many reports were received by the Federal Office for Cybersecurity (FOCS) as in the previous year. Private individuals and companies are particularly frequently affected by attempted fraud and phishing attacks. New fraud methods such as deepfakes or fake calls in the name of authorities are also on the rise.

FINMA publishes a risk monitor every year. Below is a brief overview of the risks in the areas of cyber attacks, outsourcing and money laundering.

With the new e-ID, users will be able to identify themselves digitally securely, quickly and easily in future with the best possible data protection.

More surveillance of telephony and internet data in criminal matters due to the new amendments to the ordinances on the BÜPF.

On 14 December 2022, the European legislator adopted a legislative package on digital operational resilience in the financial sector. Financial companies operating in the European Single Market are now subject to specific obligations to secure their digital systems. However, service providers of such digital systems are also affected. The requirements must be complied with from 17 January 2025.

Since 1 September 2023, private controllers and their private processors have been obliged to log certain steps in the automated processing of sensitive personal data. The FDPIC has issued specific technical recommendations for logging in accordance with Art. 4 GDPR.

The new Convention 108 was also ratified by Switzerland on 7 September 2023. The following article briefly outlines the changes that Convention 108 brings for Switzerland.

The Digital Services Act passed last year is already relevant for so called "very large online platforms and search engines" since 25 August 2023. These services already need to comply with all new obligations under the act.

After more than 15 years, the Canton of Zurich is undergoing a total revision of its law on information and data protection (IDG).

According to the parliamentary initiative of the Green Group of 15 June 2023, the nDSG should be amended in Art. 21bis nDSG.

The European Union (EU) has recently adopted regulations in the digital sector and is actively working on new ones. From the Digital Services Act (DSA) and Digital Markets Act (DMA) to the AI Regulation (AI Act) recently passed by Parliament, important changes are imminent in the EU.