Swiss and European regulators are pushing hard on AI governance, privacy, and accountability

A separate cluster in the feed focuses on AI governance, privacy, and compliance frameworks such as the EU AI Act, GDPR, and related national guidance. The practical story is that organizations are being asked to document how they use AI, what data flows into it, who approves it, and how they monitor it. For banks, insurers, and public administration, this is not just about policy language; it affects procurement, data handling, logging, and vendor selection. Several articles note that organizations are already using AI faster than they are governing it, and that shadow AI is a real operational concern. The pressure is especially visible in enterprise settings where staff are pasting data into copilots or code tools without formal approval. In the Swiss context, that means privacy, AI governance, and security will increasingly converge. This is a medium-term but clearly rising compliance story.

Sources

• GDPR e AI Act: come cambia la gestione dei dati nei modelli AI — Agenda Digitale — Cybersecurity
• Open-source AI risk register mapped to MITRE ATLAS, OWASP LLM/Agentic Apps, and NIST AI 100-2 — /r/cybersecurity
• Is shadow AI becoming a real data-loss problem, or is enterprise AI + DLP enough? — /r/cybersecurity