Switzerland: technology regulation at a glance

Framework: Distributed Ledger Technology (DLT) Act (2021) amending the Banking Act, FMIA, CISA and CO; Anti-Money Laundering Act (AMLA); Financial Institutions Act (FinIA); Financial Services Act (FinSA); FINMA ICO Guidelines (2018), Stablecoin Guidance (2019) and Guidance 01/2026 on custody — supervised by FINMA.

Switzerland has one of the most mature, comprehensive crypto frameworks in the world: rather than a single 'crypto law', it has integrated DLT/crypto-based assets into existing financial market statutes via the DLT Blanket Act (in force since 2021) and supervises activity through FINMA and self-regulatory organisations (SROs). Crypto is fully legal; exchanges, custodians, token issuers and trading venues all operate under technology-neutral 'same risk, same rule' supervision. A further consultation (closed 6 Feb 2026) proposes two new licence categories — Payment Instrument Institution and Crypto-Institution — and a dedicated stablecoin regime, with entry into force expected in 2027.

Framework: Sector-specific laws (FADP, FINMA Guidance 08/2024); Council of Europe Framework Convention on AI (signed March 2025, ratification pending); targeted legislative amendments under preparation (consultation draft by end-2026)

Switzerland has no standalone AI law and formally decided on 12 February 2025 not to enact a general cross-sector AI Act equivalent to the EU's. The Federal Council instead adopted a sector-specific strategy anchored in existing law, signed the Council of Europe's AI Framework Convention on 27 March 2025, and tasked responsible departments to prepare a consultation draft for targeted AI legislation by end-2026. Existing instruments, notably the revised Federal Data Protection Act (FADP, in force September 2023) and FINMA Guidance 08/2024, already govern AI use within their respective domains.

Framework: Federal Act on Data Protection (FADP / nFADP) of 25 September 2020, in force since 1 September 2023, with its implementing Ordinance (DPO); supervised by the Federal Data Protection and Information Commissioner (FDPIC / EDÖB).

Switzerland has a comprehensive, cross-sectoral data-protection regime under the revised Federal Act on Data Protection (FADP), which entered into force on 1 September 2023 and was extensively aligned with the EU GDPR. The independent Federal Data Protection and Information Commissioner (FDPIC) supervises enforcement for both federal bodies and private entities. On 15 January 2024 the European Commission confirmed that Switzerland continues to provide an adequate level of data protection under the GDPR, allowing free EU/EEA-to-Switzerland data flows.

Framework: Banking Act (BankG) / Banking Ordinance (BankV), FinTech licence issued by FINMA; Financial Institutions Act (FinIA/FINIG) reform (consultation 2025-2026); SIC instant-payment rail operated by SIX under Swiss National Bank oversight

Switzerland operates a tiered, FINMA-supervised licensing framework for fintech and payments: a regulation-free sandbox (up to CHF 1 million in deposits), a FinTech licence under the Banking Act (up to CHF 100 million, in force since January 2019), and a full banking licence. In October 2025 the Federal Council opened consultation on a major FinIA reform to introduce dedicated payment-institution and crypto-institution licences as successors to the FinTech licence. Open banking is industry-led with no legal mandate; instant payments on the SIC5 infrastructure launched in November 2023 with phased mandatory bank participation through November 2026.

Framework: Federal Act on Foreign Nationals and Integration (AIG/FNIA, SR 142.20); Agreement on the Free Movement of Persons (AFMP) for EU/EFTA nationals; administered by the State Secretariat for Migration (SEM)

Switzerland has no dedicated digital nomad or remote-work visa. EU/EFTA nationals working remotely in Switzerland exclusively for a foreign employer are classified by Swiss authorities as 'without work activity' and may obtain a standard B residence permit on proof of sufficient means, no work permit required. Non-EU/EFTA nationals face a quota-based, economically selective admission system that makes remote-work residency very difficult in practice; the main non-work pathway is a cantonal lump-sum taxation residence permit for high-net-worth individuals.

Framework: Draft Federal Act on Communication Platforms and Search Engines (KoPSG, consultation open until 16 Feb 2026); Federal Act on the Protection of Minors in Films and Video Games (JSFVG, in force 2024); Federal Act on Data Protection (nFADP, in force Sep 2023); Federal Act on the Surveillance of Post and Telecommunications Traffic (BÜPF, revision proposed 2025); OFCOM / DETEC as primary supervisory authorities

Switzerland does not yet have a comprehensive domestic online safety or platform-regulation law. The Federal Council opened consultation in October 2025 on a draft DSA-inspired Act on Communication Platforms and Search Engines (KoPSG), targeting very large platforms (≥10% of Swiss monthly active users ≈ 900,000). Existing rules provide age-verification obligations for on-demand audiovisual and video-game services and general data-protection coverage under the revised nFADP, but no overarching platform content-moderation regime is currently in force.

Framework: Federal Act on Information Security in the Confederation (ISG/ISA), SR 128, in force 1 January 2024; amended with mandatory cyber incident reporting for critical infrastructure from 1 April 2025; administered by the Federal Office for Cybersecurity (BACS), formerly NCSC

Switzerland's primary cybersecurity instrument is the Information Security Act (ISG), which entered into force on 1 January 2024 and sets binding information-security requirements for federal authorities and their service providers. A 2023 amendment to the ISG, brought into force on 1 April 2025 alongside the Cybersecurity Ordinance (CSO), introduced a mandatory 24-hour cyberattack reporting duty for operators of critical infrastructure, backed by fines of up to CHF 100,000 for intentional or grossly negligent non-compliance. Financial sector entities face additional obligations under FINMA Circular 2023/1 on Operational Risks and Resilience, with a hard deadline of 1 January 2026 for full operational-resilience compliance.

Framework: Swiss Code of Obligations (OR/CO, SR 220); Commercial Register Ordinance (HRegV); Federal Act on Foreign Nationals and Integration (AIG/FNA, SR 142.20)

Switzerland permits 100% foreign ownership of both GmbH (LLC) and AG (corporation) with no equity caps, making the corporate structure highly accessible to foreign investors. Incorporation itself is straightforward, notarised deed, capital deposit, and commercial register filing typically completed in 5-60 days. The primary complexity for non-EU/EFTA nationals is a prerequisite cantonal approval of a residence/work permit that requires demonstrating meaningful economic benefit to Switzerland before any permit is granted.