ARTICLE
27 May 2025

FDPIC Confirms Direct Applicability Of Data Protection Law To AI And Outlines Regulatory Approach

AO
A&O Shearman

Contributor

A&O Shearman was formed in 2024 via the merger of two historic firms, Allen & Overy and Shearman & Sterling. With nearly 4,000 lawyers globally, we are equally fluent in English law, U.S. law and the laws of the world’s most dynamic markets. This combination creates a new kind of law firm, one built to achieve unparalleled outcomes for our clients on their most complex, multijurisdictional matters – everywhere in the world. A firm that advises at the forefront of the forces changing the current of global business and that is unrivalled in its global strength. Our clients benefit from the collective experience of teams who work with many of the world’s most influential companies and institutions, and have a history of precedent-setting innovations. Together our lawyers advise more than a third of NYSE-listed businesses, a fifth of the NASDAQ and a notable proportion of the London Stock Exchange, the Euronext, Euronext Paris and the Tokyo and Hong Kong Stock Exchanges.
On May 8 2025, the Swiss Federal Data Protection and Information Commissioner (FDPIC) confirmed that the Federal Act on Data Protection (FADP) is directly applicable to AI-supported data processing.
United Kingdom Technology

On May 8 2025, the Swiss Federal Data Protection and Information Commissioner (FDPIC) confirmed that the Federal Act on Data Protection (FADP) is directly applicable to AI-supported data processing.

The FDPIC clarified that the FADP is technology-neutral and applies to all forms of data processing, including those involving AI, and that manufacturers, providers and users of AI systems are required to ensure the highest possible degree of digital self-determination for data subjects. The FDPIC also noted that data subjects have a legal right to transparency, alongside the right to object to automated data processing or to request human review of automated decisions. For AI systems, such as intelligent language models that interact directly with users, the FDPIC stated that this means there is a legal requirement to inform users whether they are communicating with a machine and whether their data is being used to improve self-learning programmes, or for other purposes.

AI-supported high risk data processing is permitted under the FADP provided that appropriate protective measures to protect data subjects are implemented, including the requirement to conduct a data protection impact assessment. However, applications that undermine privacy and informational self-determination, such as comprehensive real-time facial recognition or 'social scoring' are prohibited under Swiss data protection law.

This update follows Switzerland's signing the Council of Europe Convention on AI and Human Rights, Democracy and the Rule of Law, and the FDPIC confirmed the Federal Council's announcement that amendments to Swiss law will be made to enable ratification of the Convention.

The Swiss approach to AI regulation is based on three objectives: (i) strengthening Switzerland's position as a centre of innovation, (ii) safeguarding fundamental rights, including economic freedom, and (iii) strengthening public confidence in AI. The FDPIC emphasises that, irrespective of future AI-specific regulations, existing data protection laws must be followed for all AI-supported data processing.

The press release is available here.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

Mondaq uses cookies on this website. By using our website you agree to our use of cookies as set out in our Privacy Policy.

Learn More