Data protection is central to AI projects. Azure AI Foundry offers robust options for FADP-compliant implementations.

Legal Framework

Swiss Federal Act on Data Protection (FADP)

Stricter rules apply since September 1, 2023:

• Disclosure obligation for automated decisions
• Right to human review
• Data protection impact assessment for AI

GDPR Relevance

For companies with EU business:

• Art. 22 – Automated decisions
• Transparency requirements
• Data subject rights

Data Storage in Azure

Azure Switzerland

Microsoft operates data centers in:

• Switzerland North (Zurich)
• Switzerland West (Geneva)

Benefits:

• Data stays in Switzerland
• Swiss law applicable
• Low latency

Data Residency

Configure:

• Model hosting in Switzerland
• Training data storage
• Log retention

Data Protection Measures

1. Data Classification

Classify before AI use:

• Public – No restrictions
• Internal – Limited AI use
• Confidential – Strict controls
• Secret – No cloud processing

2. Anonymization

Apply techniques:

• PII detection and removal
• Pseudonymization
• Synthetic data for tests

3. Access Control

Implement:

• Role-Based Access Control
• Just-in-Time Access
• Audit logging

4. Encryption

Ensure:

• Encryption at rest
• Encryption in transit
• Customer-managed keys

Compliance Features

Content Filtering

Azure AI Foundry offers:

• Hate speech detection
• Self-harm filter
• Violence filter
• Custom policies

Abuse Monitoring

Monitoring of:

• Unusual usage patterns
• Policy violations
• Potential abuse

Audit Logs

Traceability through:

• API calls
• Model access
• Admin actions

Recommendations for Swiss Companies

Before the Project

1. 1Conduct data protection impact assessment
2. 2Identify affected data
3. 3Clarify legal basis

During Development

1. 1Privacy by design
2. 2Minimal data retention
3. 3Regular reviews

In Operation

1. 1Set up monitoring
2. 2Plan incident response
3. 3Regular audits

CNEXT Support

We help with:

• Data protection assessments
• Technical implementation
• Compliance documentation
• Employee training

Conclusion

With the right configuration, Azure AI Foundry is perfectly suited for Swiss data protection requirements. CNEXT accompanies you on this path.