PHP2Shell and companies’ legal obligations
The critical PHP vulnerabilities require prompt security updates. What Swiss companies need to know about responsibility, liability and reporting obligations.
Blog
Current legal topics, explained clearly and practically, with a focus on the implications for businesses, decision-makers and public institutions.

The critical PHP vulnerabilities require prompt security updates. What Swiss companies need to know about responsibility, liability and reporting obligations.
Since 1 October 2026, many Swiss companies have been required to identify and verify their beneficial owners and report them to the new transparency register within the applicable deadline.
The Swiss E-ID will arrive later than planned. The federal government is strengthening protection of the issuance process against deepfakes and manipulation of end-user devices.
The Council of States Economic Affairs and Taxation Committee (WAK-S) proposes a new mix of CET1 and AT1 capital for systemically important banks. The balance between financial stability and competitiveness remains disputed.
When artificial intelligence works directly within a document, transfers between systems are reduced. At the same time, data flows, professional secrecy and human approval become central.
Whether pseudonymised information remains personal data depends on perspective, additional knowledge and technological progress. This requires ongoing reassessment.
Note
The articles provide an overview and do not replace an assessment of the specific case. I am happy to provide an individual assessment.