On May 22, 2024, the Swiss Federal Council released its draft ordinance implementing the reporting requirement in the event of cyber-attack as set out in the Information Security Act. The public consultation will last until September 13, 2024. This new reporting requirement is expected to apply from January 1, 2025.
The Information Security Act contains a