EDPS publishes guidance for AI risk management

The European Data Protection Supervisor (EDPS) has published new guidance to help data controllers conduct data protection risk assessments (DPIAs) when developing, procuring, and deploying artificial intelligence (AI) systems under Regulation 2018/1725, commonly referred to as the EUDPR.

While primarily aimed at EU institutions (EUIs), the guidance offers practical recommendations to identify and mitigate common technical risks, thereby protecting personal data. The guidance, which aligns with ISO 31000:2018, explores the AI system lifecycle and addresses crucial concepts such as interpretability and explainability. At its core, the guidelines focus on a detailed analysis of risks and corresponding mitigation measures, structured around the four fundamental data protection principles: fairness, accuracy, data minimisation, and security.

Training Announcement: The BCS Foundation Certificate in AI examines the challenges and risks associated with AI projects, such as those related to privacy, transparency and potential biases in algorithms that could lead to unintended consequences. Explore the role of data, effective risk management strategies, compliance requirements, and ongoing governance of the AI lifecycle and become a certified AI Governance professional. Find out more.