The UK Information Commissioner’s Office (ICO) has issued the Guidance on AI and data protection (Guidance). It provides a framework for auditing AI, focusing on best practices for data protection compliance. It provides a clear methodology to audit AI applications and ensure they process personal data fairly – something ICO has highlighted as the key challenge for artificial intelligence processing personal data.

This guidance is aimed at two audiences:

• those with a compliance focus, such as data protection officers (DPOs), general counsel, risk managers, senior management, and the ICO's own auditors; and

• technology specialists, including machine learning experts,data scientists, software developers and engineers, and cybersecurity and IT risk managers.

The Guidance provides answers to the following questions:

• What are the accountability and governance implications of AI?

• What do we need to do to ensure lawfulness, fairness, and transparency in AI systems?

• How should we assess security and data minimization in AI?

• How do we ensure individuals rights in our AI systems?

The Guidance can be accessed here.

Photo by Gabrielle Henderson on Unsplash.