Data compliance
Responsible AI Data Management
Maria Prokofieva
Lead ML engineer
Neglecting compliance
Legal repercussions
Substantial fines
Reputational damage
Harm and abuse
Data owner
Defined by laws and regulations
Individual or entity
Informed consent
Informed consent
Individual grants permission
Individual retains ownership
Developers must be transparent about data collection and use
Obtaining informed consent
Consent forms
Checkboxes
Signatures
Opt-in and opt-out
Mechanisms to allow changes
Obtained before collecting or using data
Voluntary and specific
Developer must keep records
Data minimization
: only collect necessary data
Privacy and security
Throughout project lifecycle
Encryption
Prevent access
Data anonymization
Documentation
Monitoring process
Organizational data
Data Usage Agreement (DUA):
Formal contract
Terms and conditions
Transfer of data between parties
May vary
AI chatbot
Two data owners
Uses patient records, individual data, and PHI
Chatbot initiates consent protocol
Presents consent form
Voluntary agreement
Recorded
AI chatbot
DUA between clinic and developers
Responsibilities of each party
Use, security, audit, access, sharing
Data breach notifications
Rapid response
Verified by legal expert
Document
Let's practice!
Responsible AI Data Management
Preparing Video For Download...