Art & Fashion

Checklists and overviews on the implementation of NIS 2.

An AI policy alone does not constitute governance. It is crucial that organisations know which AI systems are being used, who decides on their deployment, which risks are accepted, and how procurement, operation, monitoring and escalation are embedded within the organisation. The training course provides a practical governance model for organisations wishing to scale AI in a controlled manner.

Artificial intelligence is often put to productive use within organisations more quickly than legal, contractual and organisational safeguards can be put in place. This training course demonstrates how specific AI use cases can be structured, assessed on a risk-based basis, approved and monitored from the initial idea through to live operation – with a focus on Swiss law and relevant EU considerations.

Switzerland intends to fundamentally overhaul its cyber regulation. A standalone cyber security law is set to cover manufacturers of digital products as well as operators of critical infrastructure, hosting providers and cloud service providers. For businesses, this is not just a matter of new IT security requirements: product development, management, legal and compliance functions are also likely to be affected. This may provide greater clarity – but at the same time risks creating new overlaps. The key factor will be whether the legislator succeeds in reconciling European standards, effective cyber security and workable compliance.

AI training data, the Digital Omnibus, the protection of children’s biometric data and freedom of assembly are the focus of episode 191.

Every Thursday, 10 am–11 am. Register now for free! If you have any questions or suggestions, please feel free to send a message to friedrich@haerting.de. Are you also looking for external webinars and events? You can find these under ‘Events’.

Cameras, radar sensors and AI can detect falls and alert care staff. However, when technical assistance is used in bedrooms, patient rooms or other private areas, the stakes are particularly high. The EDÖB and privatim set out the limits imposed by data protection law in a new guide. For hospitals and care homes, this means above all that surveillance must not become standard practice – and data protection must be taken into account right from the stage of procuring the technology.

Smartwatches have long been part of everyday life in the office. Smart glasses now represent a new generation of wearables that carry cameras, microphones and AI functions directly on the body. This creates new risks for organisations: confidential conversations can be recorded, people can be filmed without their knowledge, and data can be transferred to external clouds. The FDPIC warns of the data protection risks posed by wearables. Organisations should therefore check whether their existing data protection and IT policies are still adequate.

The EU is significantly expanding the information requirements regarding warranty rights and guarantees in the retail sector. From 27 September 2026, online and high-street retailers must use standardised model notices (‘harmonised notice’ and – under strict conditions – a guarantee label).