Canton Aargau information-security law (InfoSiG) and ordinance (InfoSiV)

Canton Aargau adopts its information-security ordinance (InfoSiV) and sets 1 January 2027 for the information-security law and ordinance, with a specialist unit to receive directive and enforcement powers and a cyber coordination office at the cantonal police

The Aargau government council adopted the information-security ordinance (InfoSiV) and decided that the information-security legislation, the law (InfoSiG) and the ordinance, enters into force on 1 January 2027 (translated from German) (Kanton Aargau, 2026-11-06). The canton says the law anchors uniform standards and a holistic information-security system in the cantonal administration, that an information-security specialist unit is to advise the cantonal bodies and be equipped with directive and enforcement powers so that one detection and defence strategy can be implemented, and that a further specialist unit for personnel security vetting and a cantonal cyber coordination office are being set up, both at the cantonal police (translated from German) (Kanton Aargau, 2026-11-06). The government elected Bernhard Droz, currently head of IT forensics and cybercrime at the cantonal police, as head of the cyber coordination office from 1 January 2027 (translated from German) (Kanton Aargau, 2026-11-06).

The communiqué says nothing about communes or other bearers of public tasks. In February 2025 Netzwoche reported that a majority in the consultation approved bringing them into the law's scope and that entry into force was then planned for 1 July 2026, so the final text decides whether communal bodies are bound (Netzwoche, 2025-02-24).