¶ Regulation in January 2026
As of: January 2026. The regulatory framework for AI in Switzerland and Europe.
¶ Political decisions: as of 6 September 2026
New political decisions checked on 6 September 2026; earlier background retains its stated reference date.
29.06.2026 — The EU Council gave final approval to amendments to AI rules. Its release specifies delayed high-risk application dates: 2 December 2027 for stand-alone systems and 2 August 2028 for product-integrated systems. This does not postpone every AI obligation; the published legal text remains authoritative. Original source.
04.09.2026 — The Administrative Delegation approved an approximately one-year PIA pilot from the autumn session, costing up to CHF 150,000 from the existing IT budget. Swisscom operates it in Switzerland using open-weight models, without training on inputs. Current internet research is not yet supported. Original source.
06.09.2026 — Verified status: Switzerland is preparing implementation of the Council of Europe AI convention. The Federal Council requested a consultation draft by the end of 2026; an intention to ratify is not completed ratification. Original source.
¶ Two Laws, One Gap
In January 2026, Switzerland faces a regulatory asymmetry: it has a modern data protection act, is de facto subject to the EU AI Act -- but has no dedicated AI law.
| Regulation | In force since | Scope |
|---|---|---|
| EU AI Act (Regulation EU 2024/1689) | 1 August 2024 | EU member states + third countries with EU market access |
| Swiss Data Protection Act (revDPA) | 1 September 2023 | Switzerland |
| Swiss AI Act | -- | does not exist |
¶ The EU AI Act -- What It Regulates
The EU AI Act is the world's first comprehensive law regulating artificial intelligence [1]. It classifies AI applications by risk levels:
¶ Prohibited Practices
- Real-time biometric surveillance in public spaces (with exceptions for law enforcement)
- Social scoring systems by public authorities
- Manipulation of behaviour through subliminal techniques
¶ High-Risk Applications (strict requirements)
- AI in medical devices, vehicles, critical infrastructure
- AI in education, recruitment, justice
- Biometric identification
¶ Limited and Minimal Risks
- Chatbots (labelling requirement)
- Spam filters, video games (no special requirements)
Violations are penalised with fines of up to EUR 35 million or 7% of global annual turnover [1].
¶ What the EU AI Act Means for Switzerland
Switzerland is not an EU member. But it is deeply intertwined economically with the single market. Swiss companies offering products or services in the EU must comply with the AI Act -- without having been involved in shaping it [1].
This affects:
- Swiss pharmaceutical companies with EU approvals (Novartis, Roche)
- Financial service providers with EU clients (UBS, Swiss Re)
- Technology companies with EU users
- Export industry with AI-powered products
Switzerland de facto imports EU regulation without being formally bound by it. A classic dilemma of autonomous adoption.
¶ The Swiss Data Protection Act (revDPA)
The totally revised Swiss Data Protection Act entered into force on 1 September 2023 [2]. It places the protection of personal data on a modern footing:
Key points:
- Strengthened information obligations when collecting data
- Data protection impact assessments for sensitive processing
- Notification obligation in the event of data security breaches
- Criminal sanctions of up to CHF 250,000
- Alignment with the EU GDPR to safeguard equivalence
The revDPA regulates the handling of personal data -- but it does not regulate AI systems themselves. It governs which data may be processed, but not how an algorithm makes decisions.
¶ The Bundesrat: Pragmatism Over a General Law
In February 2025, the Bundesrat decided to ratify the Council of Europe Framework Convention on Artificial Intelligence. At the same time, it made clear that Switzerland would not pursue sweeping, cross-sectoral AI regulation along the lines of the EU AI Act [3].
The Bundesrat instead relies on:
- Sector-specific adjustments to existing laws (healthcare, transport, financial sector)
- Self-regulation by industry where possible
- International cooperation rather than national go-it-alone approaches
Pragmatism as state doctrine. Enable innovation, minimise risks. The question is whether this is sufficient for a technology that advances faster than any legislative process.
¶ The Gap
What Switzerland lacks is a regulatory framework that answers three questions:
- Transparency: Who is responsible when an AI system makes a wrong decision -- the developer, the user or the algorithm?
- Discrimination: How is it ensured that AI systems do not systematically disadvantage people?
- Democratic control: How do direct democracy and algorithmic decision-making coexist?
The EU AI Act attempts to answer these questions -- with 113 articles and a compliance industry that threatens to crush small innovators while large corporations absorb the costs effortlessly [1].
Switzerland has the chance to develop a leaner approach -- one that adopts the strengths of the AI Act while accounting for Swiss particularities: direct democracy, cantonal autonomy, academic freedom.
¶ AI Regulation Timeline
| Date | Event |
|---|---|
| May 2023 | EU Parliament adopts AI Act position |
| Sep. 2023 | Swiss revDPA enters into force |
| Dec. 2023 | EU trilogue agrees on final AI Act text |
| Aug. 2024 | EU AI Act enters into force |
| Feb. 2025 | Bundesrat decides to ratify the Council of Europe Framework Convention |
| Jan. 2026 | Switzerland has no dedicated AI law |
¶ Bibliography
[1] European Union: Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (AI Act). Official Journal of the EU, August 2024.
[2] Swiss Confederation: Federal Act on Data Protection (DPA, totally revised version). In force since 1 September 2023.
[3] Swiss Bundesrat: Artificial Intelligence -- Ratification of the Council of Europe Framework Convention. Press release, February 2025.