🔴Illinois HB 3773IN EFFECTUp to ~$70K/violation|🔴Texas TRAIGA (HB 149)IN EFFECTAG-enforced|🔴Utah AI Policy ActIN EFFECT$2,500/violation|⚠️Colorado AI Act (SB 205)Jan 1, 2027AG-enforced|⚠️California SB 942Aug 2, 2026$5K/day|⚠️EU AI Act Art. 50Aug 2, 2026€35M or 7% revenue|⚠️New York RAISE ActJan 1, 2027AG civil penalties|
European Union · EU AI ActNo AI-specific federal instrument — measured against the Systematic Compilation (2026-09-02)

Switzerland AI Law Deadlines

EU AI Act + GDPR + national-law dates that businesses serving this country must meet.

Deadline: No AI-specific compliance deadline, because Switzerland has enacted no AI-specific instrument. The revised DSG and its ordinance have both been in force since 1 September 2023 and apply to AI systems that process personal data from that date.Penalty: No AI-specific penalty exists in Swiss federal law. Penalty amounts under the DSG and the Kartellgesetz are deliberately NOT quoted here: the operative penal articles were not read at source in this pass, and a fine figure taken from a secondary source is not something this product publishes.

How AI law works in Switzerland

Switzerland has no artificial-intelligence act, and this is now a standing measurement rather than a desk finding: the Bundeskanzlei's own Systematic Compilation was queried on 2026-09-02, restricted to instruments whose enforcement status is 'in force', and no federal enactment carries 'künstliche Intelligenz' in its title. That agrees with the Federal Office of Justice's own statement that there is no specific Swiss AI legislation. What binds an AI deployer is general federal law. The revised Bundesgesetz über den Datenschutz of 25 September 2020 (SR 235.1) entered into force on 1 September 2023, replacing the 1992 Act, and governs the personal data an AI system processes; the Datenschutzverordnung of 31 August 2022 (SR 235.11) entered into force the same day and carries the operational detail — Switzerland's regulation layer for this subject is real, and it is an ordinance rather than an AI statute. Competition exposure runs through the Kartellgesetz of 6 October 1995 (SR 251) and, for deceptive automated marketing, the Bundesgesetz gegen den unlauteren Wettbewerb of 19 December 1986. ⚠️ A caution that matters here more than anywhere else in this corpus: more than half of the Swiss Systematic Compilation consists of REPEALED consolidations, and the 1992 data-protection Act is still served by the same database under a 'no longer in force' status. Every instrument listed above was filtered on that status at query time, so none of them is a superseded text.

Applicable laws

  • 📜 Bundesgesetz vom 25. September 2020 über den Datenschutz (DSG, SR 235.1)
  • 📜 Verordnung vom 31. August 2022 über den Datenschutz (DSV, SR 235.11)
  • 📜 Bundesgesetz vom 6. Oktober 1995 über Kartelle und andere Wettbewerbsbeschränkungen (KG, SR 251)

The EU AI Act enters into force and becomes enforceable on August 2, 2026 — a fixed, non-negotiable deadline applicable across all 27 EU member states and the EEA. This is not a deadline for planning or preparation; it is the date on which regulators and private parties can begin filing complaints, triggering investigations, and seeking penalties. Unlike GDPR, which had a 2-year grace period before enforcement (May 2016 adoption, May 2018 enforcement), the EU AI Act's enforcement timeline is compressed: the directive was adopted in December 2023, and enforcement begins August 2, 2026 — less than 20 months from adoption to active penalty risk. Businesses should treat August 2 as the same kind of hard cutoff as GDPR's May 25, 2018: compliance is required from day one, and non-compliance creates daily exposure.

Within the August 2, 2026 deadline, nested compliance deadlines apply to different system categories. Prohibited AI systems (facial recognition in law enforcement, social credit scoring, subliminal manipulation) cannot be deployed at all after August 2 — deployment is not a compliance violation, it is an immediate prohibited activity. High-risk systems must have completed conformity assessments (including bias and fairness testing) before August 2, must document human-review processes, and must implement transparency disclosures to affected individuals by the enforcement date. Limited-risk systems must provide transparency disclosures by August 2. Prohibited systems already in deployment must be removed by August 2. The deadline structure means a single non-compliance — one high-risk system without pre-deployment assessment, one prohibited system still in operation, one missing disclosure notice — creates measurable enforcement exposure on day one of the deadline.

National implementation and enforcement begin immediately on August 2, 2026. Each EU member state has designated a national AI authority responsible for complaint intake, investigation, and penalty assessment. In Switzerland, [National AI Authority details]. These authorities are staffed and equipped to begin enforcement on August 2 — they do not wait for national regulations to be finalized or enforcement guidance to be published. The first enforcement actions will likely target the highest-impact, most visible violations: prohibited systems still in operation, high-risk hiring systems without documented assessment, and chatbots that fail to disclose AI use. Smaller or less visible violations will be addressed through complaint-driven enforcement, but the baseline assumption should be that enforcement begins immediately.

The most urgent remediation timeline is now until August 2, 2026. Businesses should immediately: conduct a complete inventory of all AI systems, identify high-risk and prohibited systems, remove any prohibited systems from production, complete conformity assessments for high-risk systems, implement transparency disclosures, establish human-review processes, and document all compliance activities. For businesses with high-risk systems already in production, this timeline is extremely compressed — you must complete risk assessment, bias testing, and remediation of identified issues within months, not years. Attempting to compress months of work into weeks creates quality risk (assessment documents become rubber stamps, bias testing becomes superficial) that invites regulatory scrutiny.

After August 2, 2026, compliance obligations become ongoing and permanent. You must maintain conformity assessments for high-risk systems, re-assess annually, conduct bias re-testing after model updates, monitor human-review patterns and escalation rates, maintain audit logs, handle individual requests for explanation and appeal, and respond to regulatory inquiries. The deadline of August 2 is not the end of compliance work — it is the beginning of continuous compliance as a permanent operational function.

Switzerland AI law deadlines

Already in effect
⚠️ EU AI Act prohibited-practices ban + AI literacy obligations (Art. 4) since February 2, 2025.
Already in effect
GPAI obligations (general-purpose AI models) since August 2, 2025.
August 2, 2026
⚠️ EU AI Act high-risk-AI obligations bite — full conformity assessment, CE marking, and registration required for systems serving Switzerland users.
August 2, 2027
Final phase: high-risk AI embedded in regulated products covered by NLF legislation.
72 hours
Personal-data breach notification window under GDPR (notify the Switzerland DPA).
Annual
Refresh DPIAs and bias assessments; review the supervisory authority's latest guidance for Switzerland.

More Switzerland resources

AI Compliance Checklist💰 AI Law Fines & Penalties📋 AI Compliance Requirements📖 AI Compliance Guide← All Switzerland resources

Other countries

Germany (EU)France (EU)Netherlands (EU)Spain (EU)Italy (EU)Sweden (EU)
Editorial standards

Anchored to the primary government source (statute, bill text, or agency rule) and verified directly against it · Last verified Sep 2, 2026. See our methodology.

Primary sources · Switzerland