Switzerland plans new cybersecurity law covering cloud providers
Switzerland is preparing a new standalone cybersecurity law that would introduce obligations for software and hardware providers, protect important digital data and establish cybersecurity responsibilities for hosting and cloud service providers.
The Swiss Federal Council announced on 25 September that it had instructed the Federal Department of Defence, Civil Protection and Sport to prepare a consultation draft for a new Federal Act on Cybersecurity by June 2027.
The proposed legislation brings together three areas that were previously being developed as separate projects: cyber resilience for products containing digital elements, protection of particularly important digital data, and the role of hosting and cloud providers in cybersecurity.
Under the planned framework, manufacturers, importers and distributors of software and hardware products would face binding cybersecurity requirements, with provisions for market surveillance and a possible ban on the sale of products considered insecure. The approach is being modelled on the European Union’s Cyber Resilience Act, with Switzerland saying it wants to limit additional compliance requirements for businesses operating internationally.
Hosting and cloud providers would also face specific cybersecurity obligations, including requirements to cooperate in responding to cyber threats and to take measures to defend against them. Existing reporting requirements for cyberattacks against critical infrastructure, which have been in force since April 2025, are also planned to be transferred into the new legislation.
The announcement comes as Switzerland continues to place greater emphasis on digital resilience and sovereignty. The Federal Council’s 2026 Digital Switzerland Strategy lists digital sovereignty and the security of data centre and cloud infrastructure among its focus areas for the year.
Switzerland already uses a combination of private and public cloud infrastructure across its federal administration. Its current approach is based on a hybrid multi-cloud strategy, with decisions about individual applications taking account of information security, data protection and other risks.
The proposed law also provides a wider context for technologies that seek to give organisations greater control over where their applications and data are hosted. The Internet Computer, developed by the DFINITY Foundation, describes its cloud engine model as allowing organisations to select the underlying hardware, location and operators used to host applications. Its technical documentation also describes replicated execution and cryptographic verification as part of the network’s security model.
DFINITY has separately promoted ICP as infrastructure for sovereign cloud deployments. In February 2026, the organisation announced a partnership with Pakistan’s Digital Authority to support a dedicated ICP subnet for sovereign cloud infrastructure and AI software systems. That partnership does not indicate any involvement by Switzerland in the proposed law.
For cloud providers and technology companies, the Swiss proposal points towards a regulatory environment in which responsibility for cybersecurity increasingly extends beyond individual organisations to the infrastructure and products on which digital services depend. The consultation draft is expected by June 2027, after which the proposal will move through Switzerland’s legislative process.
Dear Reader,
Ledger Life is an independent platform dedicated to covering the Internet Computer (ICP) ecosystem and beyond. We focus on real stories, builder updates, project launches, and the quiet innovations that often get missed.
We’re not backed by sponsors. We rely on readers like you.
If you find value in what we publish—whether it’s deep dives into dApps, explainers on decentralised tech, or just keeping track of what’s moving in Web3—please consider making a donation. It helps us cover costs, stay consistent, and remain truly independent.
Your support goes a long way.
🧠 ICP Principal: ins6i-d53ug-zxmgh-qvum3-r3pvl-ufcvu-bdyon-ovzdy-d26k3-lgq2v-3qe
🧾 ICP Address: f8deb966878f8b83204b251d5d799e0345ea72b8e62e8cf9da8d8830e1b3b05f
Every contribution helps keep the lights on, the stories flowing, and the crypto clutter out.
Thank you for reading, sharing, and being part of this experiment in decentralised media.
—Team Ledger Life