Digital sovereignty in healthcare: Swiss health data should remain under Swiss control

In Swiss healthcare institutions, the discussion about cloud solutions has changed fundamentally. What was long delegated to IT departments as a technical detail is now a strategic leadership decision. It affects executive management, boards of directors and data protection officers alike, and it can no longer be sidestepped by pointing to efficiency or market standards.

Anyone who decides today how health data is processed is not deciding about infrastructure. They are deciding about liability, trust and credibility.

Legal reality meets leadership responsibility

Data protection authorities[1] in Switzerland are currently warning explicitly against processing particularly sensitive government and administrative data with international cloud services, even when these are physically operated in Switzerland. The background is the extraterritorial effect of foreign legislation, particularly from the US, which allows authorities there to demand access to data regardless of where it is stored.

This creates a fundamental legal conflict for public institutions in Switzerland. The protection of particularly sensitive data such as health, social security or tax data is clearly regulated in Swiss law. At the same time, international providers cannot provide a binding guarantee of this protection in an emergency. This is not a theoretical residual risk, but a systemic uncertainty.

In a publicly communicated recommendation[2], the Conference of Swiss Data Protection Officers therefore stated clearly that international cloud services can hardly be considered legally unproblematic for sensitive and confidential data.

For hospitals, practices and health administrations, this means that cloud decisions are no longer a matter of technical preference. They are a question of legal responsibility and of the basis of trust with patients.

Federal reality: data protection is cantonal, and that makes the situation more acute

There is also a particular feature of the Swiss system that is often underestimated in the cloud debate: data protection in the public sector is not regulated and enforced uniformly, but at cantonal level. The cantons have their own data protection laws, their own data protection officers and in some cases different interpretations of key principles.

For healthcare institutions that operate across cantons or provide services for several cantons, this adds another layer of complexity. What is accepted under certain conditions in one canton may already be considered critical or inadmissible in the next.

International cloud models that rely on standardized contracts, global processes and central governance quickly reach their limits here. Practical implementation becomes not only legally demanding, but also very difficult to manage properly in operational terms.

The more fragmented the legal framework, the more important clear responsibilities, simple accountability models and full control over data processing and access become. This is exactly where it is decided whether a cloud strategy is viable or only works on paper.

“But can’t it be secured?”: why this logic often fails

A frequently raised objection is that international cloud services could be secured with additional encryption, supplementary contractual clauses or organizational measures. In theory, this is correct. In practice, however, the picture is different.

First, such safeguards require a very high level of specialized expertise, constant monitoring and disciplined implementation over many years. Security concepts rarely fail because of their design; they fail because of reality: staff changes, time pressure, budget constraints and conflicting priorities.

Second, responsibility always remains with the institution itself. Not with the cloud provider, not with the consultant, but with the decision-makers. Anyone who chooses a complex safeguarding architecture also bears full responsibility for ensuring that it works correctly at all times.

Third, a central contradiction is often ignored: in practice, end-to-end encryption and the effective operation of AI models are largely mutually exclusive. AI systems must be able to process, analyze and contextualize data. If data is fully end-to-end encrypted, it is effectively no longer available to the model in a usable form. The supposedly “maximally secure” solution therefore means that AI applications either cannot be operated meaningfully from a technical point of view or are severely limited in their functionality.

The result is a strategic dead end: either you allow access to data and accept the legal uncertainty, or you encrypt consistently and effectively forgo the routine use of AI in the healthcare environment.

Especially where patient data is concerned, an uncomfortable but realistic principle therefore applies: what is organizationally too complex or conceptually contradictory will not be implemented permanently and responsibly in everyday practice. And what cannot be implemented permanently and responsibly is not a viable option for highly sensitive health data.

Sovereign Swiss solutions: not a vision, but reality

Against this background, the call for sovereign Swiss cloud solutions is not a political buzzword, but a logical consequence. This means solutions that:

• are operated exclusively in Switzerland by Swiss cloud providers

• are fully subject to the Swiss legal system

• do not allow access under foreign legislation

• create clear, traceable responsibilities

• enable transparency for supervisory and data protection authorities

Digital sovereignty does not mean isolation or giving up innovation. It means freedom to shape solutions within a clear legal framework.

Our approach in practice

At Saipient, we have also examined these questions in depth. The decision to deliberately build a fully sovereign version alongside an existing solution on an international platform was not a marketing decision. It was the result of numerous conversations with data protection officers, executive management and boards of directors in the healthcare sector.

The sovereign solution:

• is operated with Swiss cloud providers

• creates no dependence on foreign legislation

• is based on open, transparent AI models

• is already in routine use today

The first implementation was carried out together with Phoenix Technologies, not as a pilot project but in regular operation with customers in hospital and practice settings. This shows that sovereignty is not just theoretically possible, but operationally feasible.

What this means in concrete terms for decision-makers

For executive management, boards of directors, CIOs and data protection officers in healthcare, clear conclusions can be drawn:

• Digital sovereignty is a governance question, not a technical detail.

• Legal clarity and control over data take precedence over technological convenience.

• Switzerland’s federal data protection reality significantly increases the requirements for cloud strategies.

• Short-term efficiency gains from international providers can create considerable legal and reputational risks in the long term.

• Viable, sovereign alternatives that combine data protection and innovation exist today.

Conclusion

The key question is not whether international cloud platforms are powerful. The question is whether their legal framework is compatible with the responsibility that Swiss healthcare institutions bear toward their patients.

Our practical experience is clear: Swiss sovereignty and digital innovation are not mutually exclusive. On the contrary, they belong together when responsibility is taken seriously. Anyone making cloud decisions today is deciding not only for their own organization, but for the trust of the people whose data has been entrusted to them.

[1] Swissinfo: Data protection officer warns Swiss authorities over US cloud risks  https://www.swissinfo.ch/eng/various/data-protection-officer-warns-swiss-authorities-over-us-cloud-risks/90478203

[2] MetaNet Blog: Schweizer Datenschutzbehörden schränken Cloud‑Nutzung für Ämter drastisch ein  https://www.metanet.ch/de/blog/schweizer-datenschutzbehoerden-schraenken-cloud-nutzung-fuer-aemter-drastisch-ein