IT Security

Artificial intelligence is fundamentally transforming drug development – making it faster, more efficient and data-driven. However, the more powerful the systems become, the greater the regulatory challenges. New guidelines from Swissmedic, the WHO and international organisations show that without clear governance, there is a risk to patient safety and market integrity. Companies are faced with the question of how to ensure both innovation and compliance at the same time.

Cloud computing is now regarded as the backbone of the digital economy. However, as soon as critical infrastructure is affected, a key question arises: how can the benefits of the cloud be reconciled with the high demands placed on security and business continuity?

The "Schabowski" case of the OVG Münster is going to the Federal Administrative Court! The proceedings revolve around Günther Schabowski's famous speech at the press conference on 9 November 1989. Who did the Haus der Geschichte buy this note from? A journalist from the BILD newspaper sued the museum on the basis of the right to information under Article 5 of the German Constitution. The OVG Münster accepted such a claim, rejecting it and basing its decision on the grounds for refusal of the IFG and Art. 86 GDPR. The Haus der Geschichte is now appealing. From minute (20:39), Dr Stefan Brink and Prof Niko Härting talk about the resolution paper of the Data Protection Conference on the P20 Data House, a federal-state project on the IT infrastructure of the police. The paper criticises in particular the lack of a legal basis for the planned IT architecture. Finally, from minute 30:13 onwards, the AI tool Microsoft Copilot is discussed. Copilot is not actually allowed to access files labelled as confidential; however, such access did take place. Stefan and Niko shed light on the consequences under data protection law and finally land on the keyword of digital sovereignty.

On 23 February 2026, the Federal Data Protection and Information Commissioner (FDPIC), together with 60 other national data protection authorities, published a joint statement on AI-generated images and the protection of privacy. In it, the data protection authorities formulate their most important expectations and principles for all organisations that develop and use AI systems to generate content. These include, in particular, robust safeguards against misuse, transparency requirements, effective and accessible erasure mechanisms and specific child protection.

When companies fall victim to a ransomware attack, they face a difficult question: Should they pay the ransom demanded to recover encrypted data, or should they refuse, as recommended by Swiss authorities? Our analysis shows how to make legally responsible decisions, what risks exist, and how companies can weigh up the risks and legal certainty.

How can incorrect personal data in the Central Migration Information Systembe corrected? Three recent rulings by the Federal Administrative Court and the Federal Supreme Court provide answers and show how the Data Protection Act (DPA) is applied in practice.

The use of artificial intelligence (AI) is revolutionising e-commerce in Switzerland. However, without careful consideration of data protection, significant risks can arise. Find out why transparent information about the use of AI in general terms and conditions (GTC) and privacy policies is essential to avoid legal pitfalls.

General crime in Switzerland has risen again - but particularly dramatically in the digital space. Cybercrime has more than doubled in just a few years and is becoming a key challenge for private individuals and companies. In view of this dynamic, preventive measures are essential. The following article analyses the current figures and shows how companies can protect themselves effectively.