Guides
Guides on data protection, the EU AI Act, FINMA, procurement and AI security, each with sources. Not legal advice.
Checklist: AI Procurement for Swiss SMEs
Practical questions for providers and for your own company before purchasing an AI tool: data protection, hosting, contracts, governance, and EU relevance.
Last verified:
AI and Cybersecurity: Risks for SMEs
AI tools with too many permissions, manipulated content (prompt injection), and AI-assisted fraud: what SMEs should know, how to protect themselves, and what to do in the event of an incident.
Last verified:
EU AI Act: Scope for Swiss Companies
When the EU Regulation on Artificial Intelligence (AI Act) applies to Swiss providers and operators: market access, use of output in the EU, risk categories, and the timeline following the Digital Omnibus.
Last verified:
FINMA Expectations for AI Governance
What FINMA Supervisory Notice 08/2024 expects from supervised institutions when using AI: governance, inventory, data quality, testing, explainability and independent review.
Last verified:
nDSG and AI: Basics for Swiss Companies
What the Data Protection Act means for the use of AI: transparency, automated individual decisions, data protection impact assessments, responsibilities, and fines.
Last verified:
US-Hosted LLMs under the revised Federal Act on Data Protection (nDSG)
When Swiss companies may transfer personal data to language models in the US: Swiss-U.S. Data Privacy Framework, standard contractual clauses, information duties, and a practical checklist.
Last verified: