FINMA Revises Video ID Circular for E-ID Act 2026
FINMA has partially revised Circular 2016/7 on video and online identification to align with Switzerland's incoming E-ID Act.
21 articles
FINMA has partially revised Circular 2016/7 on video and online identification to align with Switzerland's incoming E-ID Act.
The Federal Council has ordered DDPS to draft a standalone Federal Cybersecurity Act by June 2027, reshaping Swiss compliance obligations.
ENISA’s CRA Single Reporting Platform changes how Swiss product vendors prepare 24-hour vulnerability and incident notifications.
The EU CRA reporting duty is live. Swiss product vendors need a 24-hour vulnerability workflow and evidence trail for EU sales.
EU AI Act Article 50 transparency rules now apply, forcing Swiss deployers of chatbots and synthetic media to disclose AI use.
The EU Cyber Resilience Act imposes 24-hour incident reporting duties on Swiss manufacturers from September 11, 2026.
DORA, NIS2, and GDPR now overlap on supplier governance, forcing Swiss organisations to redesign ICT third-party risk controls.
ENISA's NIS360 2027 survey shapes where EU supervisors enforce NIS2 in 2027. Swiss groups with EU subsidiaries must benchmark now.
What NIS2 Article 20 requires of EU subsidiary boards, and why Swiss parents need a scoped, evidenced governance response.
The ESRB has classified frontier AI models as a systemic cyber risk to the EU financial system, and the ECB wants action plans by 31 October. The Swiss impact.
The NIS2 uniform incident-reporting templates set the format Swiss EU-market entities must adopt before the June 30 compliance audit.
Switzerland's ISA transitional period for mandatory cyber reporting ends mid-2026. Swiss operators must validate their NCSC 24-hour notification pipelines now.
Switzerland's KRITIS-G and the EU NIS2 revision advance in parallel. Swiss operators must navigate both legislative tracks to avoid compliance gaps by 2027.
The first mandatory TLPT cycles under DORA begin in 2026. Swiss banks and insurers with EU subsidiaries must prepare for TIBER-EU-aligned testing now.
Superseded: the Digital Omnibus moved Annex III high-risk obligations to 2 December 2027. The preparation steps here still apply.
The EU Digital Omnibus proposes one portal for NIS2, DORA, GDPR and CER notifications — but different thresholds and timelines remain unchanged. Swiss firms must plan accordingly.
Switzerland's Federal Council is drafting a new cyber products law by autumn 2026, mirroring the EU Cyber Resilience Act. What Swiss manufacturers, importers, and software vendors must prepare for now.
The EU Cyber Resilience Act's first mandatory deadline — vulnerability and incident reporting obligations — takes effect on 11 September 2026. Swiss manufacturers exporting digital products to the EU have five months to build compliant processes.
EU Digital Omnibus heads into trilogue: what Swiss compliance teams should do now on GDPR, AI Act, NIS2, and DORA before the final text lands.
On 19 November 2025, the European Commission published the Digital Omnibus.
The revised nDSG is now in force. Persistent blind spots: incomplete records of processing activities.
No articles match your search.