With a new cyber resident law, the Federal Council intends to strengthen the security of digital products. The project, planned by the fall of 2026, must establish legislation inspired by EU law and imposing the lowest possible charge on companies.
Until now, Switzerland has practically had no requirements for cyberreresilience of digital products. The Federal Council plans to fill this gap. He has in charge of the Federal Cybersecurity Office (OFCS), in collaboration with the Federal Communication Office (OFCOM) and the State Secretariat for Economy (SECO), to develop by the fall of 2026 a legislative consultation project on cyberresilience of digital products. According to the press release from the authorities, this initiative responds to the Motion 24,3810 “Realization of emergency and necessary cybersecurity controls” of the Commission for the Security Policy of the Council of States.
The new legal bases must strengthen the safety requirements for products incorporating digital elements. They aim in particular to set cybersecurity prescriptions during development and marketing, to define the monitoring of these products and to establish the foundations to prohibit the import and distribution of unsecured devices.
European framework, limited constraints
During the development of legal bases, it is planned to align with the international context, in particular on cyber resilience act European, which came into force on December 11, 2024. The objective is to develop legislation adapted to the Swiss economic place.
The resulting administrative burden for companies must be “as low as possible”, specifies the OFCS. In addition, the legislation must ensure that Swiss companies active internationally do not undergo additional expenses due to divergent requirements in other countries.
