--- title: "Switzerland Swissmedic - Cybersecurity Submission Playbook" description: "How to submit a medical device to Swissmedic in Switzerland: step-by-step route, evidence checklist, common rejections, and typical review timeline. Compared" lang: en json-ld: | [ { "@context": "https://schema.org", "@type": "WebSite", "name": "The Medical Device Cybersecurity Crosswalk", "alternateName": "MDC Crosswalk", "url": "https://mdccrosswalk.com/", "description": "Compare FDA, EU MDR, MHRA, PMDA, NMPA, TGA, MFDS and Health Canada medical device cybersecurity requirements across 29 jurisdictions." }, { "@context": "https://schema.org", "@type": "Organization", "name": "MDC Crosswalk", "url": "https://mdccrosswalk.com/", "logo": "https://mdccrosswalk.com/favicon.png", "sameAs": [ "https://bluegoatcyber.com" ], "description": "An editorial reference comparing global medical-device cybersecurity regulations. Maintained by Blue Goat Cyber." }, { "@context": "https://schema.org", "@type": "Article", "headline": "Switzerland - MedDO + Swissmedic guidance (mirrors EU MDR)", "description": "How to submit a medical device to Swissmedic in Switzerland: step-by-step route, evidence checklist, common rejections, and typical review timeline. Compared ", "author": { "@type": "Organization", "name": "MDC Crosswalk" }, "publisher": { "@type": "Organization", "name": "MDC Crosswalk" }, "image": "https://mdccrosswalk.lovable.app/favicon.png", "datePublished": "Mar 2026 (EU–Switzerland Bilaterals III package signed Mar 2 2026, incl. updated MRA covering medical devices; pending parliamentary ratification)", "about": "Swiss Agency for Therapeutic Products", "dateModified": "2026-07-16", "mainEntityOfPage": "https://mdccrosswalk.lovable.app/standards/ch" }, { "@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [ { "@type": "Question", "name": "Is SBOM required for medical devices in Switzerland?", "acceptedAnswer": { "@type": "Answer", "text": "Recommended. Mirrors EU expectations; CRA reporting (Sep 11 2026) and full compliance (Dec 11 2027) expected to apply via Bilaterals III once ratified." } }, { "@type": "Question", "name": "What does Swissmedic require for pre-market cybersecurity?", "acceptedAnswer": { "@type": "Answer", "text": "Equivalent to EU MDR Annex I §17.2; CH-REP (Swiss Authorised Representative) required." } }, { "@type": "Question", "name": "What are the post-market cybersecurity obligations under Swissmedic?", "acceptedAnswer": { "@type": "Answer", "text": "Vigilance via Swissmedic MIR forms; alignment with EU PMS." } }, { "@type": "Question", "name": "What is the penalty for non-compliance with Swissmedic cybersecurity rules?", "acceptedAnswer": { "@type": "Answer", "text": "Market removal, criminal liability under Therapeutic Products Act." } }, { "@type": "Question", "name": "How much of my FDA cybersecurity package is reusable in Switzerland?", "acceptedAnswer": { "@type": "Answer", "text": "Roughly 55% - an editorial estimate based on overlapping evidence requirements (threat model, SBOM, security risk assessment, pen-test report)." } }, { "@type": "Question", "name": "Why do Swissmedic submissions get rejected for \"no ch-rep on labeling\"?", "acceptedAnswer": { "@type": "Answer", "text": "Add Swiss AR name and address to labeling and IFU." } } ] }, { "@context": "https://schema.org", "@type": "HowTo", "name": "How to submit a medical device to Swissmedic", "description": "Post-MRA-lapse, Swiss requirements track EU MDR with a Swiss Authorised Representative and separate Swissmedic registration.", "totalTime": "1-3 months post-CE", "step": [ { "@type": "HowToStep", "position": 1, "name": "Appoint local representation", "text": "Most jurisdictions require a locally-established entity to hold the registration or act as authorised representative before submission." }, { "@type": "HowToStep", "position": 2, "name": "Reuse FDA or CE package as baseline", "text": "Adapt the cybersecurity subsection you already prepared for FDA or CE; regulators here typically accept the structure and ask for local labeling additions." }, { "@type": "HowToStep", "position": 3, "name": "Translate and localise", "text": "Local-language technical summary and labeling are usually mandatory; certified translation is safest." }, { "@type": "HowToStep", "position": 4, "name": "Submit + track queries", "text": "Respond to clarification rounds promptly; each unanswered question can add 30-90 days to the clock." } ] }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://mdccrosswalk.lovable.app/" }, { "@type": "ListItem", "position": 2, "name": "Standards" }, { "@type": "ListItem", "position": 3, "name": "Switzerland" } ] } ] --- [ The Crosswalk ](/) [Overview](/)[Playbook](/playbook)CompareReference [New Per-page social previews and this changelog ](/changelog "Per-page social previews and this changelog") Search⌘K 1. [Home ](/) 2. Standards 3. Switzerland Swissmedic # ![Flag of Switzerland](/flags/ch.svg)Switzerland - Swissmedic Mandatory Last updated · Mar 2026 (EU–Switzerland Bilaterals III package signed Mar 2 2026, incl. updated MRA covering medical devices; pending parliamentary ratification) Verified · 2026-07-16 MedDO + Swissmedic guidance (mirrors EU MDR) Share Copy link X LinkedIn Email Sources verified · 2026-07-16 Cross-checked against Swissmedic alignment with EU MDR via MRA gap. Authority Swiss Agency for Therapeutic Products Enforced May 2021 (MedDO) Legal framework Medical Devices Ordinance (MedDO) + EU MDR alignment FDA package reuse ~55% [Editorial estimate · how →](/methodology#fda-reuse) ## Scope All medical devices placed on the Swiss market. Equivalent to EU MDR requirements following loss of MRA equivalence. Pre-market Equivalent to EU MDR Annex I §17.2; CH-REP (Swiss Authorised Representative) required. Post-market Vigilance via Swissmedic MIR forms; alignment with EU PMS. SBOM Recommended Mirrors EU expectations; CRA reporting (Sep 11 2026) and full compliance (Dec 11 2027) expected to apply via Bilaterals III once ratified. Vulnerability disclosure Aligned with EU expectations; NCSC.ch coordination. Penalty Market removal, criminal liability under Therapeutic Products Act. ## Unique requirements - 01 CH-REP (Swiss Authorised Representative) on labelling - 02 CHRN (Swiss single registration number) - 03 German/French/Italian labelling ## Highlights - De-facto EU MDR equivalence - Needs Swiss AR (CH-REP) - MRA restoration package signed Mar 2 2026 (Bilaterals III); pending ratification by CH Parliament and EU - when in force, restores CE mutual recognition for the Swiss market ## Aligns with EU MDR IEC 81001-5-1 ISO 14971 ## Timeline 1. May 2021 MedDO and IvDO enter force; MRA lapses 2. Mar 2 2026 EU–Switzerland Bilaterals III package signed, including updated MRA covering medical devices; subject to parliamentary ratification 3. Mar 13 2026 Swiss Federal Council adopts Bilaterals III dispatch and submits to Parliament for ratification ## Key documents [ Swissmedic Medical Devices https://www.swissmedic.ch/swissmedic/en/home/medical-devices.html ](https://www.swissmedic.ch/swissmedic/en/home/medical-devices.html)[ Medical Devices Ordinance (MedDO) https://www.fedlex.admin.ch/ ](https://www.fedlex.admin.ch/) ## How to submit in Switzerland Playbook reviewed · 2026-07-16 Submission route Swissmedic notification under MedDO with Swiss AR Post-MRA-lapse, Swiss requirements track EU MDR with a Swiss Authorised Representative and separate Swissmedic registration. [Authority portal](https://www.swissmedic.ch/swissmedic/en/home/medical-devices.html) ### Step-by-step 1. Step 01 Appoint local representation Most jurisdictions require a locally-established entity to hold the registration or act as authorised representative before submission. 2. Step 02 Reuse FDA or CE package as baseline Adapt the cybersecurity subsection you already prepared for FDA or CE; regulators here typically accept the structure and ask for local labeling additions. 3. Step 03 Translate and localise Local-language technical summary and labeling are usually mandatory; certified translation is safest. 4. Step 04 Submit + track queries Respond to clarification rounds promptly; each unanswered question can add 30-90 days to the clock. ### Evidence checklist Item Level FDA equivalent Notes Cybersecurity documentation (baseline FDA or CE) Required SPDF Local authorised representative agreement Required — Local-language labeling and IFU Required — SBOM Recommended — Not mandatory but reduces clarification rounds. ### Common Swissmedic rejections No CH-REP on labeling Common Fix · Add Swiss AR name and address to labeling and IFU. ### Typical timeline End-to-end window: 1-3 months post-CE Phase 01 Local rep + dossier prep 2-4 months Phase 02 Regulatory review 1-3 months post-CE Phase 03 Approval + market entry 1-3 months [Previous ![Flag of Saudi Arabia](/flags/sa.svg)Saudi Arabia ](/standards/sa)[Next ![Flag of India](/flags/in.svg)India ](/standards/in) ## Related markets [![Flag of Turkey](/flags/tr.svg) Turkey ~55% FDA reuse ](/standards/tr)[![Flag of European Union](/flags/eu.svg) European Union ~60% FDA reuse ](/standards/eu)[![Flag of Brazil](/flags/br.svg) Brazil ~60% FDA reuse ](/standards/br)[![Flag of Norway](/flags/no.svg) Norway ~60% FDA reuse ](/standards/no) ## Frequently asked about Switzerland ### Is SBOM required for medical devices in Switzerland? Recommended. Mirrors EU expectations; CRA reporting (Sep 11 2026) and full compliance (Dec 11 2027) expected to apply via Bilaterals III once ratified. ### What does Swissmedic require for pre-market cybersecurity? Equivalent to EU MDR Annex I §17.2; CH-REP (Swiss Authorised Representative) required. ### What are the post-market cybersecurity obligations under Swissmedic? Vigilance via Swissmedic MIR forms; alignment with EU PMS. ### What is the penalty for non-compliance with Swissmedic cybersecurity rules? Market removal, criminal liability under Therapeutic Products Act. ### How much of my FDA cybersecurity package is reusable in Switzerland? Roughly 55% - an editorial estimate based on overlapping evidence requirements (threat model, SBOM, security risk assessment, pen-test report). Sponsored note · Blue Goat Cyber Submitting to Swissmedic? Get a second pair of eyes before you file. Blue Goat Cyber has packaged cybersecurity evidence for Switzerland alongside 37 other markets. We'll tell you what to keep, what to rework, and what's missing, in 30 minutes. [Talk through your Swissmedic submission](https://go.bluegoatcyber.com/meetings/blue-goat-cyber/discovery-session) The Crosswalk An independent reference for global medical device cybersecurity standards. A field guide for MedTech innovators and RA/QA teams charting an international path. Resource - [Comparison matrix](/compare) - [Global playbook](/playbook) - [Glossary](/glossary) - [FAQ](/faq) Sponsored by [Blue Goat Cyber ↗](https://bluegoatcyber.com) Editorially independent. Sponsorship keeps it free. © 2026 The Crosswalk. Not legal advice. Validate every requirement against current regulator publications.