Skip to main content

    AI by country · Western Europe

    AI in Switzerland: the rules, the readiness and where to start

    Last checked: 29 October 2026

    What should a company in Switzerland know before starting with AI?

    Switzerland has no AI-specific law as of 29 October 2026. The revised Federal Act on Data Protection (FADP), in force since 1 September 2023, applies directly to AI that processes personal data, as the FDPIC has stated. The Federal Council plans to ratify the Council of Europe AI Convention and asked for a consultation draft by the end of 2026, and Swiss firms selling into the EU may also fall under the EU AI Act.

    At a glance

    Switzerland at a glance

    Key facts about Switzerland
    Data protection lawRevised Federal Act on Data Protection (FADP), in force since 1 September 2023
    RegulatorFederal Data Protection and Information Commissioner (FDPIC); FINMA for financial institutions
    AI policyNo AI-specific law as of 29 October 2026; Federal Council decision of 12 February 2025 to ratify the Council of Europe AI Convention, consultation draft due by end of 2026
    Time zoneCET, UTC+1 in winter; CEST, UTC+2 in summer (India is 4.5 or 3.5 hours ahead)
    CurrencyCHF (Swiss franc)
    Business languageGerman, French and Italian (Romansh also official); English is common in business

    Why now

    Why Switzerland is worth watching

    Each point links to the document it comes from.

    • On 12 February 2025 the Federal Council decided Switzerland should ratify the Council of Europe AI Convention and adapt Swiss law, while continuing AI rules in sectors such as health and transport.[3]

    • The Federal Department of Justice and Police was asked to prepare a consultation draft by the end of 2026, covering transparency, data protection, non-discrimination and oversight.[4]

    • A FINMA survey of around 400 financial institutions found about 50% use AI or have first applications in development, and a further 25% plan to within three years.[6]

    • Of the surveyed institutions that use AI, 91% also use generative AI such as chatbots.[6]

    • The FDPIC restated in May 2025 that the FADP applies directly to AI-supported data processing, whatever future AI rules bring.[1]

    The rules

    The rules that matter for AI

    What each law or policy means when you build or buy an AI system.

    Revised Federal Act on Data Protection (FADP)

    In force2023The FDPIC says providers and users must make the purpose, functioning and data sources of AI processing transparent, and people can object to automated processing and ask for a person to review automated individual decisions. High-risk AI processing needs a data protection impact assessment. The FDPIC names real-time comprehensive facial recognition and social scoring as examples of uses that are not allowed.[1]

    Federal Council AI regulation plan (Council of Europe AI Convention)

    Draft2025There is no draft law yet. The Federal Council chose to ratify the Convention, adapt existing laws and add non-binding measures such as self-commitments. A consultation draft was due by the end of 2026; press reports in October 2026 say the consultation is now expected in 2027, which we could not confirm on an official page.[4]

    EU AI Act, Regulation (EU) 2024/1689, as amended by the AI Omnibus

    Phased2024It can apply to a Swiss company that places AI on the EU market or whose AI output is used in the EU. Most rules apply from 2 August 2026, and high-risk rules from 2 December 2027 for Annex III uses and 2 August 2028 for AI in regulated products, after the AI Omnibus entered into force on 27 July 2026.[7]

    Where AI fits first

    Where AI fits first

    Banking, insurance and asset management

    Document analysis, client correspondence and internal search, with staff checking outputs.

    FINMA Guidance 08/2024 names model risks such as bias, lack of explainability and robustness, plus IT, third-party, legal and reputational risks, and expects institutions to identify, assess, manage and monitor them.[5]

    Health care

    Drafting clinical letters and supporting image review, with clinicians deciding.

    The Federal Council wants AI regulation in health to continue sector by sector. Health data is sensitive, so a DPIA is likely needed.[3]

    Retail and customer service

    Chatbots, product search and AI-assisted checkout.

    The FDPIC says users must be able to recognise when they are dealing with AI. It closed a preliminary investigation into AI checkout cameras at Coop in October 2025, finding the processing in line with the FADP.[2]

    Exporters to the EU

    AI features in products or services sold to EU customers.

    Such firms may need to meet the EU AI Act, including chatbot transparency from August 2026.[7]

    Your first steps

    Your first steps

    1. Document the purpose, functioning and data sources of each AI system that processes personal data, and explain them to users.
    2. Tell people when they are dealing with a chatbot or other AI.
    3. Offer human review of automated individual decisions, as the FADP provides.
    4. Run a data protection impact assessment before high-risk AI processing.
    5. If you are FINMA-supervised, set up governance to identify, assess, manage and monitor AI risks, including model, data and third-party risks, as Guidance 08/2024 expects.
    6. Check whether you sell AI into the EU, and if so plan for the EU AI Act dates.
    7. Before personal data is accessed from India or another country, check the FADP rules on disclosure abroad.

    AI services for Switzerland

    AI consulting and development for teams in Switzerland

    We work remotely with companies in Switzerland, in your time zone, and keep your data under the rules described above.

    AI agents and automation

    Agents that finish multi-step work across your tools, with people approving what matters.
    Learn more

    Document Q&A (RAG)

    Answers from your own documents, with the source shown for every answer.
    Learn more

    AI governance and data protection

    Policies, review steps and audit trails that fit your local data law.
    Learn more

    Software and cloud engineering

    Web apps, integrations and cloud platforms built around your AI use case.
    Learn more

    How we work with you

    How we work with you

    We work remotely with clients worldwide, in the client's time zone. India (UTC+5:30) works 9:30 to 18:30, which is 04:00 to 13:00 UTC. In Swiss winter (UTC+1) that gives about 5 hours of overlap, 09:00 to 14:00 Swiss time; in summer (UTC+2) about 6 hours, 09:00 to 15:00. If personal data will be accessed from India, the FADP rules on disclosure abroad need to be checked and met first.

    Questions

    Common questions about AI in Switzerland

    Does Switzerland have an AI law?

    Not as of 29 October 2026. The FADP covers AI that uses personal data, and the Federal Council plans changes to Swiss law so it can ratify the Council of Europe AI Convention.

    Does the EU AI Act apply to Swiss companies?

    It can. If you place an AI system on the EU market or its output is used in the EU, the EU rules may apply even though Switzerland is not an EU member.

    Can we use customer data with a generative AI tool?

    Only in line with the FADP. The FDPIC stresses that people must know when they deal with AI and how their prompt data may be used, so check the tool's terms and where the data goes.

    What does FINMA expect from banks using AI?

    Its Guidance 08/2024 expects institutions to identify, assess, manage and monitor AI risks, with sound governance. FINMA found most institutions were still in the early stages of building this.

    Can personal data flow from the EU to Switzerland?

    Yes. The European Commission lists Switzerland as having an adequacy decision under the GDPR, so EU personal data can be transferred without extra transfer tools.

    Complimentary tools

    Try these first

    Three complimentary tools from our AI Toolkit that suit a team starting out.

    AI readiness score

    Answer a few questions and see where your team stands, in about five minutes.
    Open the tool

    AI use case triage

    Test an idea against data, risk and effort before you spend on it.
    Open the tool

    AI project cost estimator

    Get a rough build and run cost range for a first AI project.
    Open the tool

    Read next

    Sources

    Sources

    Facts checked on 29 October 2026. Numbers in square brackets above match this list.
    1. [1] Federal Data Protection and Information Commissioner (FDPIC), 2025-05-08. Update: Current data protection legislation is directly applicable to AI(edoeb.admin.ch)
      Full title and what we used it for

      Update: Current data protection legislation is directly applicable to AI. Primary. Used for the FADP's entry into force on 1 September 2023 and the FDPIC's AI requirements: transparency, objection, human review, DPIA and prohibited uses.

    2. [2] Federal Data Protection and Information Commissioner (FDPIC), 2026-01-28. Data Protection Day 2026: Uses of generative AI and data protection iss…(edoeb.admin.ch)
      Full title and what we used it for

      Data Protection Day 2026: Uses of generative AI and data protection issues. Primary. Used for transparency on AI use and prompt data, and the Coop checkout camera case.

    3. [3] Swiss Federal Council, 2025-02-12. KI-Regulierung: Bundesrat will Konvention des Europarats ratifizieren(admin.ch)
      Full title and what we used it for

      KI-Regulierung: Bundesrat will Konvention des Europarats ratifizieren. Primary (press release, German). Used for the decision to ratify the Council of Europe AI Convention and continue sector rules in areas such as health and transport.

    4. [4] Federal Office of Justice, 2025-02-12. Künstliche Intelligenz(bj.admin.ch)
      Full title and what we used it for

      Künstliche Intelligenz. Primary (German). Used for the consultation draft due by end of 2026 and its scope. The later timing (consultation in 2027) comes from trade press (inuit.at, ictk.ch) and a BACS page and is not confirmed on an official Federal Council release.

    5. [5] FINMA, 2024-12-18. FINMA guidance on governance and risk management when using artificial…(finma.ch)
      Full title and what we used it for

      FINMA guidance on governance and risk management when using artificial intelligence. Primary. Used for the risks FINMA names, its expectations and its finding that most institutions are at an early stage.

    6. [6] FINMA, 2025-04-24. FINMA survey: artificial intelligence gaining traction at Swiss financi…(finma.ch)
      Full title and what we used it for

      FINMA survey: artificial intelligence gaining traction at Swiss financial institutions. Primary. Used for the survey of around 400 institutions, the 50% and 25% shares and the 91% generative AI share.

    7. [7] European Commission, 2026-10-19. AI Act: regulatory framework for AI(digital-strategy.ec.europa.eu)
      Full title and what we used it for

      AI Act: regulatory framework for AI. Primary. Used for the EU AI Act timeline and the AI Omnibus, which the page says entered into force on 27 July 2026.

    8. [8] European Commission, 2026-10-29. Adequacy decisions(commission.europa.eu)
      Full title and what we used it for

      Adequacy decisions. Primary, accessed on this date. Used to confirm Switzerland has an EU adequacy decision, so personal data can flow from the EU to Switzerland.

    This is general information, not legal advice. Swiss AI rules are still being prepared and the timetable may change. We could not open the FADP text on Fedlex, so article numbers are not given. Check with a qualified Swiss lawyer before you act. Facts checked on 29 October 2026.

    Other country guides

    Starting with AI in Switzerland?

    Talk to an engineer. The first call is free, and we start with a readiness assessment before any budget is committed.

    Talk to our team Get your AI score