Switzerland: Entry into force with grace period of Information Security Act

On 8 November 2023, the Swiss Federal Council decreed that the Information Security Act enters into force with a grace period until 1 January 2024. The Act regulates the cybersecurity of the Swiss government institutions and contains cybersecurity rules for third parties engaging with the government. The Act is accompanied by four executive decrees regulating information security, personal safety checks, operational safety procedures, and identity management systems and directory services.