PHP2Shell and companies’ legal obligations
The critical PHP vulnerabilities require prompt security updates. What Swiss companies need to know about responsibility, liability and reporting obligations.

I combine legal precision with an understanding of business and a clear perspective on technological change.
Precise analysis. Practical implementation.
Vice-President of FDP Rupperswil
Legal practice
I advise on banking and financial market law, compliance and governance, data and technology.
Practice and experiencePragmatic support for financial service providers, drawing on many years of experience with regional and cantonal banks.
Clear responsibilities, risk-based controls and governance that works in day-to-day business.
Interim leadership of Legal and Compliance, with legal management responsibility and direct advice to executive management and the board of directors.
Data protection, data strategies and responsible use of data, legally sound and technically workable.
Contracts, cloud outsourcing, digital business models and AI projects, from initial idea to reliable operation.
Business decisions, ownership structures and board matters with a view to the whole picture.
Guiding you to success

Articles
Legal developments explained clearly, with a focus on implementation in businesses and institutions.
The critical PHP vulnerabilities require prompt security updates. What Swiss companies need to know about responsibility, liability and reporting obligations.
Since 1 October 2026, many Swiss companies have been required to identify and verify their beneficial owners and report them to the new transparency register within the applicable deadline.
The Swiss E-ID will arrive later than planned. The federal government is strengthening protection of the issuance process against deepfakes and manipulation of end-user devices.
The Council of States Economic Affairs and Taxation Committee (WAK-S) proposes a new mix of CET1 and AT1 capital for systemically important banks. The balance between financial stability and competitiveness remains disputed.
When artificial intelligence works directly within a document, transfers between systems are reduced. At the same time, data flows, professional secrecy and human approval become central.
Whether pseudonymised information remains personal data depends on perspective, additional knowledge and technological progress. This requires ongoing reassessment.
Personally