Data protection and AI (FADP, GDPR)

The Swiss Federal Data Protection and Information Commissioner (FDPIC) has made clear that the FADP applies directly to AI applications. This includes transparency about purpose and functioning, the right to express one’s point of view on automated individual decisions, and the obligation to ensure data security.

In practice: do not enter confidential customer or employee data into AI services whose data use is unclear; check business contracts and data processing agreements; and define internally which data may go into which tools.