The new version of the Ordinance on the Surveillance of Correspondence by Post and Telecommunications (OSCPT) aims to extend surveillance obligations to those offering services such as e-mail, messaging, social networking, and VPNs.

1. As of 5,000 users, the ordinance requires operators to identify users by means of a form of identification. The operator must keep this information for 6 months after the end of the relationship (Article 19). For example, an association running a mastodon server would have to identify users if it exceeded 5,000.
2. The ordinance seeks to impose the decryption of communications when the operator possesses one of the encryption keys (Article 50a).

At least (2) can be dealt with technically - don't possess one of the keys.