A software vendor emails: “From August, every company needs to be AI compliant.” A colleague replies that the EU AI Act has nothing to do with Switzerland. Then management reads that the federal government is preparing new Swiss rules.
The problem is not a lack of information. It is three different regulatory questions being compressed into one sentence.
As of 31 August 2026, Switzerland does not have an overarching law specifically regulating all AI systems. Swiss federal authorities are developing a national approach: the Federal Office of Justice is expected to prepare a consultation draft by the end of 2026, linked to implementation of the Council of Europe AI Convention, while non-legislative and sector-oriented measures are also part of the plan.
For an SME, that does not mean “do nothing”. It also does not mean copying the EU AI Act into a Swiss policy and calling the job finished.
Three regulatory lanes, not one AI law
The cleanest operating model is to separate three tracks.
| Track | Meaning | SME question |
|---|---|---|
| Swiss law today | existing data-protection, employment, contract, competition and sector rules can already govern AI use | what existing rule applies to this process? |
| EU exposure | the EU AI Act may apply depending on role and territorial scope | are we in a covered provider/deployer scenario? |
| Swiss roadmap | AI-specific legislation and soft-law measures are being developed | what should we make documentable now? |
Confirmed fact: Swiss federal pages state that there is not yet overarching AI-specific legislation and that a consultation draft is to be prepared by the end of 2026.
Confirmed fact: the planned Swiss work is connected to implementation of the Council of Europe Framework Convention and includes areas such as transparency, data protection, non-discrimination and supervision.
That is not the same statement as “Switzerland is adopting the EU AI Act”.
Existing Swiss law does not wait for the future AI bill
A company can create a legal or contractual problem with AI today even without a dedicated AI statute.
If an AI system processes personal data, Swiss data-protection rules may be relevant. If a chatbot states prices or creates commitments, ordinary contract and unfair-competition questions do not disappear because a language model wrote the sentence. Regulated sectors may already have additional duties.
The practical analysis should therefore start with the business process, not the model brand.
Examples: a phone assistant collects customer details; an agent writes appointments into a calendar; a chatbot quotes cancellation terms; HR uses a tool to assess applications; marketing creates synthetic media.
For each use case, ask what data is processed, who is affected, whether the system only assists or actually executes, and which existing rules already govern that activity.
This is governance guidance, not a legal conclusion for any particular company.
EU AI Act exposure requires a scope analysis
A popular shortcut says: “If you have EU customers, the AI Act applies.” That is too broad.
Article 2 of the EU AI Act covers, among others, providers placing systems on the EU market, deployers established in the EU, and certain providers/deployers in third countries where the output produced by the AI system is used in the Union.
For a Swiss company, you therefore need to identify role, system and territorial link. A German tourist booking a room in Switzerland is not, by itself, the whole legal analysis. At the same time, a Swiss provider can clearly fall into scope when placing an AI system on the EU market or operating in another situation described by Article 2.
Some EU transparency obligations have applied since 2 August 2026. AlpenAgent already has a dedicated article on that subject; this Swiss roadmap should not turn into a second generic AI Act explainer.
Author recommendation: add a jurisdiction field to the AI inventory: Swiss-only / EU establishment / EU market / output used in EU / unclear. “Unclear” should trigger review, not a guess.
What Swiss SMEs should watch through the end of 2026
The federal approach combines legislative and non-legislative work. The consultation draft is scheduled for the end of 2026, while industry solutions, voluntary commitments and other soft-law measures are also envisaged.
An SME does not need to monitor every government page every morning. It needs an owner and a review cycle.
Track changes in transparency requirements, data protection, sector-specific rules, documentation/oversight expectations, cross-border EU exposure and vendor contracts that allocate compliance responsibilities.
Remember that a consultation draft is not a final enacted obligation. The exact Swiss rules can still change through consultation and legislative process.
That is why the right control today is readiness to understand your own systems, not pretending to comply with a law that has not yet been enacted.
Minimum safe pilot: inventory five real AI systems
Choose the five AI applications that matter most in daily operations and record six fields.
- Use case: what does the system actually do?
- Owner: who is accountable operationally?
- Data: what personal or business information flows through it?
- Effect: does it read, recommend, decide or execute an external action?
- Jurisdiction: Swiss-only, possible EU exposure, regulated sector?
- Controls: approvals, logs, human handoff, deletion and review rules?
This simple sheet gives legal counsel something concrete to review. Without it, “Are we AI compliant?” is almost impossible to answer usefully.
Track share of production AI systems inventoried, systems with an assigned owner, use cases with mapped data flow, use cases with jurisdiction reviewed, high-impact systems with a human-control rule, and overdue regulatory reviews.
These are not statutory metrics. They measure whether the business has basic operational knowledge of its AI estate.
When to hand the question to legal counsel
Not every AI experiment needs an external opinion. A writing assistant without sensitive data is different from automated evaluation of people or an agent committing financial actions.
Seek appropriate legal review where the EU AI Act scope is genuinely uncertain and the exposure could be material, where sensitive or high-impact personal-data processing is involved, where automated decisions can affect rights or access, or where sector-specific regulation matters.
The practical conclusion is calm: Swiss SMEs in 2026 should neither panic-copy EU compliance documents nor wait passively for a future federal AI law. Build an inventory, understand which existing Swiss rules govern each process, flag real EU exposure and assign someone to monitor the Swiss regulatory track. That foundation will survive much better than a generic “AI policy” downloaded from a vendor.
This is not certification. It supports sensible operation now and later adaptation. Our AI governance check covers organisation; the agent inventory supplies the system list.
Sources
- Swiss Federal Chancellery — Regulation of AI
- OFCOM — Artificial intelligence / Swiss regulatory approach
- Federal Office of Justice — Artificial intelligence
- Council of Europe — Framework Convention on AI
- EUR-Lex — EU AI Act, Article 2
FAQ
Does Switzerland already have a general AI law in 2026?
No. Federal authorities state that there is no overarching AI-specific law yet. A consultation draft is planned by the end of 2026.
Does the EU AI Act automatically apply to every Swiss company with EU customers?
No. Scope depends on the actor’s role, how the system is placed or used, and the territorial conditions in Article 2.
Is Switzerland copying the EU AI Act?
The official Swiss approach is tied to the Council of Europe AI Convention and a Swiss, sector-oriented regulatory model. It is not described as a one-to-one copy.
What should an SME document first?
AI systems, use cases, owners, data flows, external effects, jurisdiction and control mechanisms.
When is legal advice worth it?
When scope, sensitive data, automated decision-making or significant contractual/sector consequences require a real legal assessment.