AI regulation: EU AI Act, AI governance and the Swiss perspective
The EU AI Act has largely applied since August 2026; the obligations for Annex III high-risk AI follow in December 2027. Swiss companies are covered if they offer AI systems in the EU or their output is used there.
This page collects our content on the AI Act as amended by the Digital Omnibus: terms, the comprehensive guide, articles on risk classes, GPAI and transparency, checklists for classification and AI use, and our implementation service.
Terms
- EU AI Act
- AI system
- High-risk AI
- Prohibited AI practices
- General-purpose AI model (GPAI)
- Transparency obligations (Art. 50 AI Act)
- AI literacy (Article 4)
- AI inventory
- AI governance
- AI agent
- AI guardrails
- AI regulatory sandbox
- Shadow AI
- Prompt injection
- Fundamental rights impact assessment (FRIA, Art. 27 AI Act)
- Technical documentation (Art. 11 AI Act)
- Human oversight (Art. 14 AI Act)
- Reporting serious AI incidents (Art. 73 AI Act)
- EU database for high-risk AI (Art. 49 and 71 AI Act)
- Conformity assessment
- Post-market monitoring (AI Act)
- Microsoft 365 Copilot
- Model Context Protocol (MCP)
Articles
- The EU AI Act in 2026: what has applied since August and what follows until 2028 — the SME guide after the Digital Omnibus
- Fundamental rights impact assessment and data protection impact assessment: when both are needed and how to combine them
- Connecting MCP and AI agents securely to company systems
- AI Act readiness for SMEs: a 30-day plan after the Digital Omnibus
- AI Act risk classification: a decision framework in seven steps
- High-risk AI after the Digital Omnibus: provider and deployer obligations and the timeline to 2028
- EU AI Act and General-Purpose AI: What LLM-Based Developers Need to Know
- AI Act transparency obligations under Art. 50: what must be disclosed and marked since August 2026
- Article 4 after the Digital Omnibus: what remains of the AI literacy duty
- The EU AI Act and Switzerland: when Swiss companies are covered and which path the Federal Council is taking
- The AI Act and the GDPR: where they overlap, where they differ and how to implement both together
Checklists
- Checklist: rolling out Microsoft 365 Copilot safely
- Checklist: securing MCP servers and AI agents
- High risk or not: reasoning an Annex III classification properly
- EU AI Act conformity: a checklist for the first pass
- AI literacy under Article 4: from intention to evidence that holds
- Checklist: an AI usage policy that people actually follow
- Checklist: vetting AI vendors and AI features before use
Decision guides
More topics
- Anti-money laundering compliance in Switzerland: AMLA, SRO, KYC and transparency register
- Public procurement in Switzerland: procedures, criteria and bids
- Cybersecurity for SMEs: reporting duties, baseline protection and incident planning
- Data protection under the Swiss FADP and GDPR: duties, processes and evidence
- Requirements and projects: requirements engineering, HERMES and acceptance
LM
Reviewed by
Founder & CEO · MSc Innovation Management (FFHS) · PMP · IREB CPRE · Author of “Identity Over Discipline”
Mandates incl. EDA, MeteoSwiss, FSO, SERI, FINMA, Swisscom and BLS