Switzerland’s revised Federal Act on Data Protection (FADP / LPD) applies to personal data processing — including processing performed with AI systems. The FDPIC has stated that the FADP applies directly to AI-based processing.
What Swiss SMEs should control
- personal data in prompts;
- cross-border model providers;
- transparency and security measures;
- high-risk processing assessments when needed.
International teams based in Switzerland
If you serve EU clients, map both FADP and GDPR. If you use agents that send email or update CRM, add human approval and audit logs.
Conclusion
Swiss privacy culture expects control, not slogans. A Vault-before-model architecture is a concrete measure aligned with minimisation and security duties.
CTA: Use TrustAI as an approved Swiss/EU-oriented AI workspace with Vault protection.
FAQ
Does the Swiss FADP apply to ChatGPT?
When personal data is processed through AI tools, FADP duties can apply to the Swiss controller. Assess purpose, security and processor relationships.