Preparing for safe and compliant use of AI in the organisation.
What’s the problem?
How can you leverage the power of AI in a responsible and secure way?
Artificial Intelligence (AI) is everywhere. Technology providers are developing AI-powered applications at a fast rate, marketers can’t finish a sentence without mentioning it, and organisations want to use it (many already are).
We recognise that AI-powered technology can produce impressive results, but it is in its infancy and it is important that the risks of using this technology are understood and carefully managed.
Like any information technology, it must comply with Data Protection regulations and meet your Information Security obligations.
What questions should we ask about AI?
- What do I need to worry about?
- Where do I start with adopting/managing AI?
- What AI might already be available and in use?
As is typical with our assessment programmes, we will help you:
- Understand the risks
- Know what governance framework needs to be in place to mitigate against the risks – the “guardrails”
- Know what people, process and technology should be in place to support this governance
What are the recognised principles for AI Governance?
As defined by the UK Government and the European Parliament:
- Transparency and explainability
- Fairness
- Security and robustness
- Accountability
- Privacy and data governance
- Human-centricity
- Societal and environmental well-being
In addition to these principles set out by the UK Government and European Parliament, we at Oyster IMS think there should be one more to cover the benefits of using AI.:
- Innovation and information advantage
The ICO’s perspective on AI Governance
This guidance covers what we think is best practice for data protection-compliant AI, as well as how we interpret data protection law as it applies to AI systems that process personal data. The guidance is not a statutory code. It contains advice on how to interpret relevant data protection law as it applies to AI, and recommendations on good practice for organisational and technical measures to mitigate the risks to individuals that AI may cause or exacerbate.
ICO – The Information Commissioner’s Office – Guidance on AI and data protection, March 2024
