Online safety & content laws in Switzerland (2026)

The Federal Council launched a public consultation on the draft Federal Act on Communication Platforms and Search Engines (KomPG), targeting very large online platforms and search engines used by ≥10% of Swiss residents monthly (approx. 900,000 users). The bill imposes content-reporting channels, algorithmic transparency, advertising archives, GTC requirements, and a mandatory Swiss legal representative for foreign operators. Consultation closed 16 February 2026.

An amendment to the Information Security Act (ISG), together with the new Cybersecurity Ordinance (CSV), made it compulsory for operators of critical infrastructure (energy, water, transport, cantonal/communal administrations) to report cyberattacks to the Federal Office for Cybersecurity (BACS) within 24 hours of discovery. Fines of up to CHF 100,000 for non-compliance apply from 1 October 2025.

Switzerland's comprehensively revised data protection law took effect, aligning with EU GDPR principles and enabling ratification of Council of Europe Convention CETS 108+. Key additions include mandatory data breach notification, privacy-by-design obligations, new data subject rights, and personal fines up to CHF 250,000—directly affecting how online services handle Swiss users' data.

The Federal Council and cantons approved a new time-unlimited National Cyberstrategy, superseding the 2018–2022 NCS. It defines 17 measures across five objectives: empowerment of individuals/businesses, secure digital services and infrastructure, effective incident detection and response, prosecution of cybercrime, and Swiss leadership in international cooperation.

The comprehensively revised TCA explicitly enshrined net neutrality in statute (Art. 12e), requiring ISPs to treat all internet traffic equally without technical or economic discrimination. The revision also strengthened consumer protection online through stricter rules on phone marketing, spoofing prevention, ISP obligations to combat spam, and protections for children and young people.

Swiss voters approved (63.1% in favour) extending the criminal anti-discrimination norm (Art. 261bis SCC) to cover sexual orientation, explicitly criminalising discriminatory statements made on social media, television, and public venues. This was the first direct-democratic extension of Swiss speech law to cover online platforms.

The Federal Council adopted the second NCS, establishing the National Cybersecurity Centre (NCSC) as the primary coordination body for cyber policy. It set structured governance targets for protecting critical infrastructure, the economy, and Swiss society from cyber threats, building on the capability foundations of the 2012–2017 NCS.

The revised Ordinance on Surveillance of Post and Telecommunications (VÜPF) implemented the 2016 BÜPF statute, placing concrete data retention and technical interception obligations on ISPs, email providers, and hosting services, with requirements calibrated by provider type and scale. This established the operational framework for lawful interception of internet communications.

The Federal Council adopted Switzerland's inaugural national cybersecurity strategy, establishing for the first time an institutional and policy baseline for countering cyberrisks at the federal level. The strategy focused on building capabilities, governance structures, and inter-agency coordination mechanisms for protecting critical infrastructure—laying the groundwork for all subsequent cybersecurity legislation.