AI & Consent to use data. How do you obtain and maintain consent to use users data in internal AI models?

1.3k views2 Comments

Sort by:

Director of ITa year ago

I have not yet seen the incorporation of patient data into private AI data repositories for training but it is necessary to advance AI models. Even if incorporated into a HIPAA agreement, I believe it should be specifically called out. Those data pools would also then need to be secured and monitored for breaches.

CISO/CPO & Adjunct Law Professor in Finance (non-banking)a year ago

Determine the jurisdictions of the users. Research their requirements for informed consent. Determine whether there are edge cases to consider, such as data from children. Explain what data will be used and how, to the users. Obtain affirmative consent. Notify the users of any changes to the use of their data, allowing them to opt out.

New AI laws are being written regularly, if possible take a conservative approach to give your organization regulatory breathing room.

Content you might like

Is Vendor Management part of Procurement in your organization?

Yes, it's integrated together55%

No, VMO is separated42%

Other (comment below)2%

View Results

Do you have an up to date inventory of your physical systems, services and user accounts?

Yes72%

No21%

Unsure5%

Other (explain in the comments)1%

View Results

A common challenge in our risk-tiering framework for suppliers is that even the lowest risk tier still requires processing.
Has anyone implemented a "not relevant" risk tier in their model?
This tier would apply to vendors posing genuinely negligible security risk.

Which process mapping software does your organization use to map out current processes and future workflows?

We are currently developing an Open Source (OS) Policy for our company. To guide us through this process, we are following several Gartner publications. However, we are also looking for real-world implementation cases. Do you know of any examples of OS Policy implementation that you could share with us?