AI & Consent to use data. How do you obtain and maintain consent to use users data in internal AI models?

1.3k views2 Comments

Sort by:

Director of ITa year ago

I have not yet seen the incorporation of patient data into private AI data repositories for training but it is necessary to advance AI models. Even if incorporated into a HIPAA agreement, I believe it should be specifically called out. Those data pools would also then need to be secured and monitored for breaches.

CISO/CPO & Adjunct Law Professor in Finance (non-banking)a year ago

Determine the jurisdictions of the users. Research their requirements for informed consent. Determine whether there are edge cases to consider, such as data from children. Explain what data will be used and how, to the users. Obtain affirmative consent. Notify the users of any changes to the use of their data, allowing them to opt out.

New AI laws are being written regularly, if possible take a conservative approach to give your organization regulatory breathing room.

Content you might like

What sorts of challenges have you encountered in adapting your governance framework to address AI adoption across business units, and how are you attempting to resolve these?

Have you been able to effectively scale existing controls for non-human identities, or have you found it necessary to add new controls to meet needs resulting from AI adoption?

Which of these areas are you targeting for funding increases in your 2026 cybersecurity budget? (Choose all applicable)

Threat detection & response 33%

Identity & access management 67%

Cloud security 67%

Security awareness training 50%

Other

N/A

View Results

How can security leaders in smaller organizations stay informed about emerging threats if they don’t have access to formal threat intelligence feeds?

What work technology do you have assigned to you?

Desktop32%

Laptop86%

Tablet24%

Smart Phone28%