IAPP AI Privacy Recommendations

As with many standards and regulations the IAPP - International Association of Privacy Professionals also points strongly to the EU AI Act.

Key Takeaways:

1. Define AI governance.

2. Govern data appropriately this can be broken down into (1) data cataloging and (2) AI-specific data governance.

3. Implement purpose-built AI governance capabilities (this focuses on purpose and permission and is a core pillar of AI governance).

4. Set up apppropriate AI access control measures.

5. Ensure data quality (e.g. check for bias).

6. Consider model governance this can be broken down into: (1) Purpose and permission, (2) Model-data lineage, (3) Model evaluation and assessments.

The full recommendations can be found here.