Domain 2: AI and Privacy Flashcards

Guidelines for handling data with privacy, security, and fairness.

• U.S. HEW Report (1973)
• OECD Guidelines (1980)

1. No secret collection
2. Access and amendment
3. Consent
4. No secondary use
5. Appropriate safeguards

• Individuals can access and amend their personal data
• Data should be collected from the individual

The reason for data collection must be specified at the time of collection.

Only collect necessary data and keep it only as long as needed.

Data must be accurate, complete, up to date, and relevant to the specified purpose.

Implement administrative, technical, and physical protections for data.

Provide advance notice of data collection and ensure transparency of policies.

The organization must take responsibility for ensuring compliance with its policies.

Data must only be used for the purpose specified at collection.

• Inform users that AI is used
• Disclose if inputs and outputs are retained and used for training

• Users should voluntarily and clearly consent to data collection
• Consent must be informed and in plain language

A proactive approach embedding privacy into IT systems and processes from the start.

Ann Cavoukian

Build privacy and data protection into design and operation of systems by default.

1. Respect for users
2. Proactive, not reactive
3. Default setting
4. Embedded into design
5. Positive sum
6. End-to-end security
7. Transparent

Robot Pigs Devour Enormous Purple Eggplant Tacos.

• Ensures highest level of privacy is automatically applied
• Strict privacy settings enabled by default

It ensures privacy settings are automatically enforced without user intervention.

Privacy by Design and Default