What changes in Switzerland’s cantonal rules from September 1

1 September 2026 brings immediate changes to local oversight, public-sector pay and federal prosecution. Switzerland's legal map is built in layers. The Confederation sets federal rules, while cantons regulate areas such as municipal administration, public employment and cantonal authorities. That division makes the September changes highly local in their direct effect, even as some measures reach businesses operating across borders.

In Bern, a revised cantonal Data Protection Act brings more than 1,000 municipalities and bodies governed by municipal law under the direct supervision of the cantonal data protection authority. Four large municipalities, Bern, Biel/Bienne, Köniz and Thun, keep their own data protection offices.

Basel City is putting most of a public-sector salary package into effect on the same date. It covers starting salaries, cantonal police pay measures and higher financial allowances. The package carries CHF 18 million in additional annual expenditure, plus CHF 4.3 million in one-off spending.

The Office of the Attorney General also begins operating under new organisational and administrative rules. A separate development arrives on 11 September, when the first mandatory duties under the EU Cyber Resilience Act affect covered digital products sold in the EU by Swiss businesses.

More than 1,000 Bernese bodies will report to one cantonal data protection authority from 1 September. The revised Bernese law changes who supervises data handling in municipalities and other bodies governed by municipal law. For residents, the practical issue is accountability: complaints and oversight involving covered bodies will be handled within the cantonal supervisory framework.

The reform does not erase every municipal arrangement. Bern, Biel/Bienne, Köniz and Thun, the canton’s four largest municipalities, retain their own data protection offices. That creates a two-track structure inside the same canton. Smaller municipalities and covered municipal-law bodies move under direct cantonal supervision, while the four largest cities continue with local offices.

The source does not specify changes to individual rights, complaint forms, deadlines or local data-handling systems. Residents and municipal staff should therefore consult the relevant authority before assuming that an existing contact point or procedure has changed. Municipal administrations should also confirm how the revised supervision affects internal records, procurement and responses to data-access requests.

The change illustrates how Swiss federalism works in practice. Data protection rules operate within federal and cantonal frameworks, while the organisation of oversight can vary from one canton, and even one municipality, to another.

Basel City’s public-sector pay package starts spending immediately, while one major allowance change waits until 2027. From 1 September, the canton will largely implement measures approved by the cantonal parliament. The package increases starting salaries, introduces measures for the cantonal police and raises financial allowances.

The financial scale is clear. Basel City expects CHF 18 million in additional annual expenditure, alongside a CHF 4.3 million one-off cost. These sums cover the package as approved, though the source does not provide the value of each individual measure or the number of employees affected.

Employees should distinguish the September changes from the cost-of-living adjustment. The latter applies to all pay grades from 1 January 2027. September therefore marks the beginning of most measures, not the full completion of the package.

The cantonal parliament approved the funding and related legislative amendments in a second vote in May 2026. Basel City had previously adopted a more extensive package in April, but lawmakers repeated the vote after a ballot was not counted. That procedural history matters because the September implementation rests on the corrected parliamentary process and the final approved funding.

The Office of the Attorney General is changing its operating structure on 1 September. New regulations on organisation and administration will reshape the OAG’s structure, staffing and procedures. The stated aim is more efficient case management and more targeted specialisation.

The reform also identifies newer forms of criminal activity as a reason for specialisation, including cybercrime and crypto-related offences. The source does not list individual appointments, staffing numbers or the precise internal divisions that will result. Its immediate significance is administrative: cases, expertise and procedures will be reorganised under the new framework.

For the public, the change may be less visible than Bern’s supervision reform or Basel’s salary measures. It concerns a federal prosecution institution rather than a cantonal administration. Still, it forms part of the same September legal timetable and shows the range of reforms taking effect on 1 September.

The OAG’s changes also sit alongside a wider cybersecurity shift. The Federal Office for Cyber Security is preparing a consultation document for a possible Swiss framework on the cyber resilience of digital products. That work is expected in autumn 2026 and does not itself create a new Swiss law on 1 September.

Swiss companies selling covered digital products into the EU face new duties from 11 September. The first mandatory requirements under the EU Cyber Resilience Act apply to products containing digital elements. They include vulnerability management and a 24-hour reporting obligation for security incidents.

The rules are European, but Swiss manufacturers and retailers can be affected when they offer relevant software or connected devices in the EU market. Compliance will depend on the product and its route to market. The source says failure to comply may lead to heavy fines or exclusion from the EU market.

This is separate from the cantonal changes in Bern and Basel City. A Bernese municipality deals with cantonal data protection supervision. A Basel City employee is affected by a cantonal pay measure. A Swiss technology company exporting to the EU may face product-security obligations under European law. Each measure has a different legal source and different people responsible for acting on it.

The Federal Office for Cyber Security is tasked with preparing a consultation document by autumn 2026 for a corresponding Swiss regulation. That consultation will consider the international context and could shape future Swiss requirements for the development and marketing of connected products. For now, the immediate cross-border deadline is 11 September 2026.