The Federal Council recently adopted the Ordinance on Protecting against Cyber Risks (OPCy), which is set to enter into force on 1 July 2020. This move is the next step in a series of measures taken by the Federal Council to adopt a new organisational structure and implement a national strategy to protect Switzerland against cyber risks. Along with the adoption of the OPCy, the Federal Council has also planned for 20 additional positions in the respective offices for cyber risk protection.
The Reporting and Analysis Centre for Information Assurance recently published its latest semi-annual report regarding the most important cyber incidents and cyber risks of the second half of 2019 in Switzerland and abroad. The report contains several practical recommendations for individuals and companies to improve their protection against cyberattacks.
Data protection laws continue to apply as they did prior to the COVID-19 crisis. However, the Swiss data protection authority, the Federal Data Protection and Information Commissioner, will be aware of the particular challenges and constraints that employers face at present. This article provides an overview of some of the data protection issues that employers face.
On 1 January 2020 the Swiss Financial Market Supervisory Authority implemented various revised rules primarily targeting small banks (the so-called 'small banks regime'). Among other aspects, this will result in a relaxation of IT outsourcing requirements for financial institutions. The amendments are positive and a step in the right direction, as they will allow financial institutions to enjoy more leeway to benefit from IT outsourcing services.
While many countries have introduced far-reaching obligations to report cyber incidents, Switzerland has not yet followed this lead. However, the Federal Council recently adopted a report which considers key issues with regard to the introduction of a general reporting obligation for operators of critical infrastructure. The report also discusses possible implementation models.