<h3>What is the EU Cyber Resilience Act?</h3>
<p>The CRA establishes horizontal cybersecurity requirements for products with digital elements that are made available on the EU/EEA market. Its primary goal is to enhance cybersecurity across the EU/EEA by ensuring that hardware and software products and their remote data processing solutions are designed, developed, and maintained with fewer vulnerabilities throughout their lifecycle.</p>
<h3>Which Products are Covered by the EU Cyber Resilience Act?</h3>
<p>So-called &#8220;products with digital elements&#8221; covered by the CRA include hardware and software products that are intended or foreseeable to operate with connectivity to other devices or networks. This includes a broad variety of connected products, such as laptops, smartphones, tablets, fitness trackers, drones, routers, browsers, baby phones, surveillance cameras with remote access, smart home appliances, and remote-controlled or connected machinery and factory equipment.</p>
<p>In each case, the CRA does not only apply to the connected product as such, but also to its remote data processing solution. This includes cloud-enabled functionalities of connected products that enable users to control the product at a distance. For other cloud computing services, such as software as a service (SaaS), platform as a service (PaaS) or infrastructure as a service (IaaS), the cybersecurity requirements of NIS 2 Directive (EU) 2022/2555 (<strong>NIS 2 Directive</strong>) apply if the relevant service provider is deemed an essential or important entity under the relevant national implementation laws of the NIS 2 Directive.</p>
<p>The CRA is the first horizontal regulation applicable to products with digital elements across all sectors. Before the CRA, the EU had only vertical, sector-specific cyber security requirements, such as in the field of medical devices, motor vehicles, civil aviation or marine equipment. These sector-specific regulations remain in force and products regulated under the relevant acts are exempt from the CRA. Likewise, products with digital elements developed or modified exclusively for national security or defense purposes are outside the scope of the CRA.</p>
<h3>How Are Swiss Companies Affected by the EU Cyber Resilience Act?</h3>
<p>The CRA applies if products with digital elements are made available on the EU/EEA market. Manufacturers and distributors domiciled outside the EU/EEA have to ensure compliance with the CRA if they make their covered products available in the EU/EEA. Given the EU/EEA&#8217;s significance as a primary sales market for numerous Swiss industries, the CRA will notably affect companies in Switzerland. Moving forward, exporters of products under the CRA will need to comply with the CRA.</p>
<h3>What Are the Main Obligations Under the EU Cyber Resilience Act?</h3>
<p>The main obligations under the CRA apply to manufacturers of products with digital elements and include the following:</p>
<ul>
<li><strong>Product requirements</strong>: Manufacturers must ensure compliance with the essential cybersecurity requirements defined in Annex I to the CRA when placing a product with digital elements on the market, e.g., they must design and manufacture digital products to avoid known vulnerabilities and regularly update products to address security flaws. If components sourced from third parties are integrated into a product, the manufacturer must exercise due diligence so that those components do not compromise the cybersecurity of the product.</li>
<li><strong>Continuous risk assessment</strong>: Manufacturers must perform a cybersecurity risk assessment regarding the relevant product with digital elements. The cybersecurity risk assessment must be documented and updated during the support period. The support period shall reflect the length of time during which the product is expected to be in use, but is generally at least five years. The support period for a product may vary depending on its characteristics, often being longer for durable goods like fridges compared to smartphones. Manufacturers should also carefully select advertising language. Promising &#8220;lifelong happiness&#8221; with a device could imply a support obligation under the CRA for the user&#8217;s lifetime.</li>
<li><strong>Documentation and information</strong>: Before the product with digital elements is placed on the market, the manufacturer must draw up a technical documentation with all relevant details of the means used by the manufacturer to ensure that the product complies with the CRA. The manufacturer must keep the technical documentation at the disposal of the market surveillance authorities for at least 10 years after the product has been placed on the market or for the support period, whichever is longer. In addition, manufacturers must ensure that the product with digital elements is accompanied with the minimum information and instructions according to Annex II of the CRA (including the contact details of the manufacturer, the intended purpose of the product and the end-date of the support period).</li>
<li><strong>Reporting</strong>: Manufacturers must report any actively exploited vulnerability contained in the product and any severe incident having an impact on the security of the product to a designated Computer Incident Response Team (CSIRT) and the EU Agency for Network and Information Security (ENISA). For this purpose, the manufacturer must submit an early warning notification of an incident without undue delay and in any event within 24 hours of the manufacturer becoming aware of it. In addition, a detailed report on the incident must be submitted without undue delay, but at the latest within 72 hours, and a final report within 14 days.</li>
<li><strong>Conformity assessment</strong>: Manufacturers must perform a conformity assessment of the product with digital elements to determine whether the essential cybersecurity requirements set out in Annex I to the CRA are met. The EU differentiates between different product categories and classes and imposes stricter obligations the higher the criticality of the product. For the majority of products subject to the CRA, a self-assessment by the manufacturer will be sufficient to assess safety. For important and critical products, an assessment by a third party is required.</li>
</ul>
<p>While the bulk of obligations applies to manufacturers, the CRA contains a set of reduced duties for the other actors in the supply chain of a product with digital elements. For instance, distributors of products with digital elements must act with due care, verify that the manufacturer has complied with its duties under the CRA relevant to the distributor&#8217;s operations and collaborate with the relevant market surveillance authorities.</p>
<h3>When Will the EU Cyber Resilience Act Come Into Effect?</h3>
<p>The CRA will enter into force on December 10, 2024, and is set to actually apply starting December 11, 2027, giving companies a three-year transition period to comply with the new requirements. Products with digital elements that have been placed on the market before that date, can also be subject to the CRA if, from that date, these products are substantially modified, e.g., in the event of a software update that changes the intended purpose of the product or if new features are added to a product.</p>
<p>Certain provisions of the CRA will be enforceable already earlier: The reporting obligations of manufacturers of products with digital elements will apply from September 11, 2026. Even earlier than that, the EU/EEA Member States must establish the regulatory infrastructure required to enforce the CRA, i.e., they must notify the EU Commission of bodies authorized to carry out conformity assessments under the CRA (conformity assessment bodies or notified bodies), ensure appeal procedures against decisions of the notified bodies and designate notifying authorities. These duties of EU/EEA Member States apply from June 11, 2026.</p>
<h3>What Are the Sanctions for Violations of the CRA?</h3>
<p>The CRA provides for administrative fines up to EUR 15 million or 2.5% of the company&#8217;s global annual turnover, whichever is higher. In addition to fines, the national market surveillance authority can take appropriate steps to prohibit or restrict a non-compliant product with digital elements from being made available on its national market, to withdraw it from that market, or to recall it if an economic operator does not take adequate corrective action intended to make the product comply with the CRA.</p>
<h3>Does Switzerland Have a Law Similar to the EU Cyber Resilience Act?</h3>
<p>Switzerland does not have a dedicated horizontal act for cybersecurity of products with digital elements, like the CRA.</p>
<p>The Swiss horizontal product safety regulation, the Product Safety Act (PSA), applies to hardware and software, including products of the kind covered by the CRA, but it does not include specific cybersecurity requirements. Horizontal cybersecurity requirements are provided for in the Swiss Federal Act on Data Protection (<strong>FADP</strong>; see our Bulletin <a href="https://www.homburger.ch/en/insights/revision-of-the-swiss-data-protection-law-is-complete" target="_blank" rel="noopener">here</a>), insofar as the processing of personal data is at issue. In addition, sector-specific regulation addressing aspects of cybersecurity exists, such as the FINMA Circular 2023/1 on Operational Risks and Resilience. In a wider context, the revised Swiss Information Security Act (ISA), expected to come into force on January 1, 2025, provides for a duty of critical infrastructures to report cyberattacks to the National Cyber Security Centre (NCSC) and thus replicates obligations that are prescribed by the NIS 2 Directive in the EU.</p>
<h3>Which Other Laws Apply When Bringing Digital Products to Market?</h3>
<p>The EU has enacted comprehensive legislation to harmonize the digital market. In some cases, similar Swiss laws exist. These other EU and Swiss laws may need to be observed cumulatively if a company intends to make a product with digital elements available on the market. In particular, the following provisions may apply:</p>
<ul>
<li>General Data Protection Regulation (<strong>GDPR</strong>). The GDPR applies if personal data of individuals is processed in the context of the product. Similarly, the FADP needs to be complied with in such a case.</li>
<li>Artificial Intelligence (<strong>AI</strong>) Act (<strong>EU AI Act</strong>): The EU AI Act applies if AI systems or general purpose AI models are used in the context of the product (see our Bulletin on the EU AI Act <a href="https://www.homburger.ch/de/insights/eu-ai-act-enters-into-force-on-august-1-2024" target="_blank" rel="noopener">here</a>). Switzerland does not (yet) have a law similar to the EU AI Act. It is expected that the Swiss Federal Council will inform end of 2024 or early 2025 how it intends to regulate AI.</li>
<li>Data Act: If the product with digital elements is a connected product or a related service of the so-called internet of things (<strong>IoT</strong>), the Data Act applies. Switzerland does not have a law similar to the Data Act regulating the handling of personal and non-personal data in the context of the IoT.</li>
</ul>
<h3>Action Points for Swiss Companies</h3>
<p>To prepare for the CRA, Swiss companies should undertake the following initial steps:</p>
<ul>
<li><strong>Assess CRA scope</strong>: Swiss companies making products available in the EU/EEA should assess whether they are in scope of the CRA.</li>
<li><strong>Assess current compliance</strong>: Companies in scope of the CRA should evaluate current products and systems against the CRA requirements to identify any gaps in compliance.</li>
<li><strong>Implement necessary changes</strong>: Companies in scope of the CRA must ensure compliance with the CRA until the relevant provisions enter into force. If necessary, they must update security protocols, product designs, and compliance processes as needed to meet CRA standards. Companies should also review and adapt their contractual provisions to require their business partners (e.g., suppliers of components for products with digital elements) to comply with the CRA.</li>
<li><strong>Conduct regular training</strong>: Companies in scope of the CRA should train staff on CRA requirements and the importance of cyber resilience.</li>
<li><strong>Establish continuous monitoring</strong>: Companies in scope of the CRA should set up systems to continuously monitor compliance with CRA standards to swiftly address any deviations or updates.</li>
</ul>
<p>These proactive measures will help Swiss companies navigate CRA regulations effectively and maintain access to the EU/EEA market.</p>


20241128_Bulletin_Preview_EU-Cyber-Resilience-Act_1000x1000

EU Cyber Resilience Act's Impact on Swiss Companies

<h3>As from September 15, 2024, the New Framework will Facilitate the Disclosure of Personal Data from Switzerland to the U.S.</h3>
<h3>What Is New?</h3>
<p>By way of its decision of August 14, 2024, the Swiss Federal Council has recognized that the Swiss-U.S. DPF provides for an adequate level of data protection when private companies or public authorities in Switzerland disclose personal data to U.S. companies that participate in the Swiss-U.S. DPF. <a href="https://www.fedlex.admin.ch/eli/cc/2022/568/en#annex_1" target="_blank" rel="noopener">Annex 1</a> of the Swiss Federal Ordinance on Data Protection will be updated to include such disclosures under the Swiss-U.S. DPF as guaranteeing an adequate level of data protection.</p>
<p>Switzerland thus follows the approach taken earlier by the EU with the adoption of the EU-U.S. Data Privacy Framework (<strong>EU-U.S. DPF</strong>) (see our <a href="https://www.homburger.ch/en/insights/are-data-transfers-to-the-united-states-safe-again" target="_blank" rel="noopener">Bulletin of July 11, 2023</a>). The new Swiss-U.S. DPF substantially corresponds to the EU-U.S. DPF, which marked the (preliminary) end of a period of uncertainty for disclosures of personal data to the U.S. after the «Schrems II» landmark decision of the Court of Justice of the European Union (<strong>CJEU</strong>) struck down the predecessor of the EU-U.S. DPF (see our <a href="https://homburger.ch/de/insights/eugh-urteil-im-fall-schrems-ii" target="_blank" rel="noopener">Bulletin of July 16, 2020</a>).</p>
<p>Most importantly, the Swiss-U.S. DPF provides for the following:</p>
<ul>
<li>The U.S. aligns its legal system with fundamental principles of Swiss law by way of the <a href="https://www.federalregister.gov/documents/2022/10/14/2022-22531/enhancing-safeguards-for-united-states-signals-intelligence-activities" target="_blank" rel="noopener">U.S. Executive Order 14086</a> executed by President Biden on October 7, 2022 (<strong>EO 14086</strong>). The changes include a limitation of U.S. intelligence activities to what is proportionate, oversight of U.S. intelligence services, and effective redress. Earlier this year on June 13, 2024, the <a href="https://www.justice.gov/opcl/executive-order-14086" target="_blank" rel="noopener">U.S. Attorney General has designated Switzerland as a qualifying state</a> for purposes of implementing the redress mechanism.</li>
<li>U.S. companies may self-certify that they adhere to a defined set of privacy principles. Certified U.S. companies must ensure in particular the rights for data subjects as known from the DPA and redress options, including a free of charge independent dispute resolution mechanism and an arbitration panel. Compliance with these principles is monitored by the U.S. Department of Commerce (<strong>DoC</strong>) and enforced by the U.S. Federal Trade Commission.</li>
</ul>
<h3>When Will the Swiss-U.S. DPF Enter Into Force?</h3>
<p>The new Swiss-U.S. DPF will be effective from September 15, 2024.</p>
<h3>What Are the Consequences of the New Swiss-U.S. DPF?</h3>
<p>The Swiss-U.S. DPF will facilitate disclosures of personal data from Switzerland to the U.S.: Once effective, Swiss data exporters will be able to disclose personal data to recipients in the U.S. who participate in the Swiss-U.S. DPF without having to enter into SCC and performing a data transfer impact assessment.</p>
<p>Even for companies continuing to rely on SCC, the new Swiss-U.S. DPF will facilitate their data disclosure to the U.S. and the data transfer impact assessment, given that the limitations imposed by the U.S. EO 14086 apply irrespective of whether personal data is disclosed under the Swiss-U.S. DPF or based on a different transfer instrument, such as the SCC.</p>
<h3>Is There a List of U.S. Companies Participating in the Swiss-U.S. DPF?</h3>
<p>The DoC maintains and publishes a list of U.S. companies that have self-certified and declared to comply with the Swiss-U.S. DPF (<strong>DPF List</strong>, accessible <a href="https://www.dataprivacyframework.gov/list" target="_blank" rel="noopener">here</a>). There are exceptions as to which U.S. companies are eligible to participate in the Swiss-U.S. DPF, but Swiss data exporters can rely on the fact that companies on the list published by the DoC are certified.</p>
<h3>Is There Still a Need to Execute a Data Transfer Agreement Under the Swiss-U.S. DPF?</h3>
<p>Even when disclosing personal data under the Swiss-U.S. DPF, it is typically advisable for data exporters to enter into a suitable data transfer agreement with the data importer. This agreement should include the following, in addition to any other terms governing the relevant data disclosure in the specific circumstances:</p>
<ul>
<li>Obligation to comply with the principles of the Swiss-U.S. DPF;</li>
<li>Obligation to remain duly certified under the Swiss-U.S. DPF;</li>
<li>Obligation to notify data exporter immediately of a removal of the DPF List and the reason for such removal;</li>
<li>Mechanism to tackle the consequences of a removal from the DPF List.</li>
</ul>
<h3>What to Do with Existing SCC or Binding Corporate Rules?</h3>
<p>In principle, SCC or binding corporate rules that were concluded earlier are no longer necessary for data disclosures to a U.S. data importer who participates in the Swiss-U.S. DPF. Companies should however carefully consider whether to fully migrate their disclosures of personal data to the U.S. to the Swiss-U.S. DPF as there may be valid reasons to continue relying on the SCC or binding corporate rules:</p>
<ul>
<li>If the U.S. data importer is removed from the DPF List, the data disclosure is no longer considered to be covered by an adequate level of protection. Existing SCC or binding corporate rules could still serve as a fallback to ensure adequate protection; and</li>
<li>The validity of the EU-U.S. DPF is already being challenged through lawsuits in the EU, as its predecessors were. Should the CJEU ultimately decide to invalidate the EU-U.S. DPF, this will in all likelihood also impact the Swiss-U.S. DPF and companies relying exclusively on the Swiss-U.S. DPF may be left unprotected. Thus, maintaining existing SCC or binding corporate rules may serve as a protection should the Swiss-U.S. DPF be invalidated at some point.</li>
</ul>
<h3>What Are the Consequences of a Removal from the DPF List?</h3>
<p>U.S. companies may fall off the DPF List of participating companies if:</p>
<ul>
<li>They voluntarily withdraw from the Swiss-U.S. DPF;</li>
<li>They fail to complete their annual re-certification; or</li>
<li>They persistently fail to comply with the principles.</li>
</ul>
<p>For data disclosures that occurred <em>prior</em> to the removal of the U.S. company from the DPF List, the Swiss data exporter may argue that these disclosures were made lawfully under the adequacy decision.</p>
<p>For data disclosures that occurred <em>after</em> the removal of the U.S. company from the DPF List, the Swiss Federal Council’s adequacy decision does not apply. Instead, the parties must guarantee an adequate level of data protection by other means recognized by the law, including SCC or binding corporate rules. If no such guarantees can be put in place, the U.S. data importer should return or delete the personal data.</p>
<h3>Is the Swiss-U.S. DPF a Permanent Solution for Swiss-U.S. Data Disclosures?</h3>
<p>In principle, the Swiss-U.S. DPF is intended to be a permanent solution. However, it marks the third attempt of Swiss and U.S. authorities to facilitate transatlantic disclosure of personal data, after the CJEU struck down first the EU-U.S. Safe Harbor Framework, and then the EU-U.S. Privacy Shield (with the so-called «Schrems II» decision, see our <a href="https://www.homburger.ch/en/insights/cjeu-decision-schrems-ii-new-hurdles-data-transfers-usa" target="_blank" rel="noopener">Bulletin of July 16, 2020</a>), which in each case also ended the corresponding arrangements between Switzerland and the U.S. Given that the EU-U.S. DPF is already being challenged through lawsuits in the EU, time will tell whether the EU-U.S. DPF and the Swiss-U.S. DPF will withstand the judicial review.</p>
<p>In addition, the U.S. legislation may change. The Swiss Federal Council will constantly monitor the relevant U.S. decisions and review the adequacy decision on a regular basis. The first review will take place one year from now. If the Swiss-U.S. DPF malfunctions, the adequacy decision will be adjusted or withdrawn.</p>


RZ_Preview_Lock_SB_01

New Swiss-U.S. Data Privacy Framework

<p>On January 15, 2024, the EU Commission published its <a href="https://ec.europa.eu/commission/presscorner/detail/en/ip_24_161" target="_blank" rel="noopener">report</a> on the results of its first review of the adequacy decisions previously taken under the old EU Data Protection Directive. The EU Commission concludes that <strong>Switzerland continues to provide an adequate level of protection for personal data</strong> transferred from the EU.</p>
<p>According to its report, the EU Commission welcomes the developments in the Swiss legal framework since the adoption of the first adequacy decision in July 2000, including in particular the modernization of the Swiss Data Protection Act (cf. our <a href="https://www.homburger.ch/en/insights/revision-of-the-swiss-data-protection-law-is-complete" target="_blank" rel="noopener">Bulletin</a> of August 31, 2022). These developments have contributed to an increased level of data protection, in a manner sufficient for the EU Commission to maintain its adequacy decision.</p>
<p>Maintaining the EU adequacy decision was one of the main objectives of the revision of the Swiss Data Protection Act, which entered into force on September 1, 2023: Without the EU&#8217;s recognition of the adequacy of Swiss data protection law, the export of personal data from the EU to Switzerland would have become much more burdensome. Today&#8217;s confirmation by the EU Commission thus marks the achievement of a key goal in the efforts to modernize Swiss data protection law in a manner consistent with the EU General Data Protection Regulation (GDPR).</p>
<p>The review of adequacy decisions by the EU Commission, which has now been completed, is the first such review since the GDPR came into force in 2018. The GDPR calls for regular reviews, and the EU underlines its intention to further intensify dialogue and cooperation with like-minded international partners on data flows and digital issues in general.</p>


EU Confirms Adequacy of Swiss Data Protection Law

Gesellschaftsrecht / M&A

Kapitalmarkt

Steuern

Arbeitsrecht und Vergütung für Führungskräfte

Wettbewerb

Regulierung

IP / IT

Finanzierungen und Anlageprodukte

Immobilien

Homburger News

Homburger and Liberty Global, Sunrise

<p>On October 16, 2024, Liberty Global Ltd. (NASDAQ: LBTYA, LBTYB and LBTYK) and Sunrise Communications AG (Sunrise) announced the key dates of the spin-off of Sunrise from Liberty Global. After the spin-off, Sunrise, which is Switzerland&#8217;s largest private telecommunications provider, will be an independent, separate publicly traded Swiss company.</p>
<p>As part of the spin-off, Liberty Global shareholders will receive Sunrise Class A shares and Sunrise Class B shares in the form of Sunrise Class A ADSs and Sunrise Class B ADSs. The Sunrise Class A shares will be listed on the SIX Swiss Exchange (SIX) and the Sunrise Class A ADSs will be listed on the Nasdaq Global Select Market (NASDAQ). The spin-off is subject to approval by Liberty Global&#8217;s shareholders. The first day of trading on the NASDAQ and the SIX is scheduled for November 13 and 15, 2024, respectively.</p>
<p>Homburger AG acts as Swiss counsel to Liberty Global and Sunrise. The Homburger team is led by Daniel Daeniker and Daniel (Danny) Häusermann and includes, among others, Carlo Sulser, Patrick Schmidt, Michael Lüchinger, Marilena Balthasar, Felix Beltle and Paula Delissen (all Corporate / M&amp;A, Capital Markets), Stefan Oesterhelt, Laetitia Fracheboud, Juliette Buob and Tanja Niederer (all Tax), Andreas Müller, Jeremy Reichlin and Daniel Bötticher (all Employment and Executive Compensation), Richard Stäuber and Christoph Grüninger (all Competition, Regulatory), Gabriel Kasper (IP / IT), Sarah Fasel (Financing and Investment Products) and Daniel Junginger (Real Estate).</p>


Homburger advises Liberty Global and Sunrise on the Spin-off and Listing of Sunrise on the SIX and NASDAQ

Datenschutz

Prozesse

Apollo_bw_640-140

Homburger and Apollo Global Management

<p>Homburger advises high-growth, global alternative asset manager Apollo Global Management, Inc. (Apollo; NYSE: APO) on the acquisition of The Travel Corporation (TTC), a leading international travel group. TTC, which has been privately owned and operated for more than a century, is a global portfolio of 18 market leading travel brands, including Trafalgar, a leading escorted tour operator, Uniworld Boutique River Cruises, a luxury all-inclusive river cruise line, Contiki, youth travel specialist tour company, premium guided vacation company Insight Vacations, as well as other global travel brands and supporting business entities.</p>
<p>The Homburger team is led by Daniel Hasler and includes Marco Rostetter, Nicola Togni, Léonard Aeschlimann, Isabelle Cordey and Luc Huber (all Corporate / M&amp;A), Gabriel Kasper (Data Protection and IP / IT) and Manuel Adassery (Regulatory and Litigation).</p>


Homburger advises Apollo Global Management, Inc. on the acquisition of The Travel Corporation

NZZ_web_640x140

Homburger and NZZ

<p>On May 30, 2024, Aktiengesellschaft für die Neue Zürcher Zeitung (<strong>NZZ</strong>) announced the acquisition of a 25%-stake in APG SGA SA (<strong>APG|SGA</strong>) from the two anchor shareholders JCDecaux SE and Pargesa Asset Management S.A. for a total consideration of CHF 165 m. The transaction is expected to close in the coming days. JCDecaux SE and Pargesa Asset Management S.A. will remain shareholders in APG|SGA with respective stakes of 16.44% and 13.86%.</p>
<p>The Homburger team advising NZZ is led by Anna Peter and Daniel Daeniker and includes Héloïse de Jamblinne, Matthias Müller, Norina Tröhler and Micha Fankhauser (all Corporate / M&amp;A), Jürg Frick and Stefan Bindschedler (both Financing), Richard Stäuber and Katharina Bratvogel-Wilk (both Competition), Gregor Bühler and Gabriel Kasper (both IP / IT), Frédéric Fitzi (Employment), as well as Dieter Grünblatt and Philippe Weber (both Tax).</p>


Homburger advised NZZ on the acquisition of a strategic 25%-stake in APG|SGA, a leading Out-of-Home Media company in Switzerland

Gabriel
Kasper

Homburger advises Liberty Global and Sunrise on the Spin-off and Listing of Sunrise on the SIX and NASDAQ

Homburger advises Apollo Global Management, Inc. on the acquisition of The Travel Corporation

Homburger advised NZZ on the acquisition of a strategic 25%-stake in APG|SGA, a leading Out-of-Home Media company in Switzerland

EU Cyber Resilience Act's Impact on Swiss Companies

New Swiss-U.S. Data Privacy Framework

EU Confirms Adequacy of Swiss Data Protection Law

Extraterritorial Scope of EU Digital Strategy

Extraterritorialer Geltungsbereich der EU-Digitalstrategie

Verbotene KI-Praktiken und Deepfakes

Join the Team

Gabriel Kasper

Karriere

Sprachen

Zulassung

Teams

GabrielKasper

Homburger advises Liberty Global and Sunrise on the Spin-off and Listing of Sunrise on the SIX and NASDAQ

Homburger advises Apollo Global Management, Inc. on the acquisition of The Travel Corporation

Homburger advised NZZ on the acquisition of a strategic 25%-stake in APG|SGA, a leading Out-of-Home Media company in Switzerland

EU Cyber Resilience Act's Impact on Swiss Companies

New Swiss-U.S. Data Privacy Framework

EU Confirms Adequacy of Swiss Data Protection Law

Extraterritorial Scope of EU Digital Strategy

Extraterritorialer Geltungsbereich der EU-Digitalstrategie

Verbotene KI-Praktiken und Deepfakes

Join the Team

Gabriel Kasper

Karriere

Sprachen

Zulassung

Teams

Gabriel
Kasper