UU裸聊直播

6 September 2024
By
Data Privacy & Security Reporter at MLex^庐

Artificial intelligence regulation is beginning to proliferate around the world. Enterprise use of AI tools is also expected to grow rapidly as businesses make use of platforms to create their own systems they can trust enough to ply with their own precious data. 

The compliance industrial complex is already in gear. 

Platforms that let companies build and adapt AI tools can also assess them for compliance in real time. Yet despite generative AI鈥檚 penchant for error, humans also pose significant AI risks to companies. Any enterprise needing to comply with AI regulation or policy should audit their workers鈥� use of the technologies, lawyers and data protection experts say. 

Growth markets

The likes of China and the EU are being joined by additional jurisdictions introducing AI legislation. Individual US states are gathering pace and the new UK government has its thinking cap on. 

Multinationals of all sizes need to start complying if they鈥檙e using or selling AI products in these jurisdictions. 

Tech heavyweight IBM is hoping to help companies create their own AI tools and make sure they鈥檙e compliant with company policy and any local, national and international policies of their choice. The platform, Watsonx, is IBM鈥檚 plug-and-play attempt to capture the growing enterprise market now the consumer market is held by a few major players. But it can鈥檛 do everything.

The platform offers a selection of existing large-language models, including Meta鈥檚 open-source Llama options, Amazon鈥檚 offerings and its own range, Granite. Customers can then introduce their own data to fine-tune models, with the idea being that a company builds its own transparent, trusted tool.

The customer also chooses any pieces of legislation it wants to comply with, as well as their own policies. Then Watsonx generates a series of questions for a compliance officer to go through.

鈥淲e use automation to be able to help [compliance staff] answer with the type of specificity, but the overall answering of the questions requires a human in the loop,鈥� Ritika Gunnar, IBM's general manager for data and AI, told MLex.

Full automation is not imminent, legally or technologically. 鈥淚 think there鈥檚 a lot of progress to be made before that鈥檚 even considered,鈥� Gunnar said.

Even so, the approach could have a democratizing effect on the adoption of AI tools, Gunnar said, especially considering the cost savings as smaller, cheaper-to-run models allow companies to 鈥渁chieve the same or better outcomes at a fraction of the cost, and we鈥檝e shown some of that now when it comes to the regulation 鈥� our belief is that we can also make that accessible.鈥�

The library of regulations is growing as IBM is doing deals with other compliance organizations, such as Credo.ai, which are creating compliance models for other legislations 鈥� such as from US states. 

Human error

Real-time dashboards can give vital information about compliance with regulations, but companies also need to understand what their people are doing outside corporate systems, lawyers and privacy experts say.

Company policies around not using AI come up against staff seeking productivity gains installing software, using browser-based generative AI or abandoning work computers to do certain tasks.

鈥淧eople are using it on their phones, they鈥檙e using it on their personal devices,鈥� James Moore, co-founder of Flex Legal, told a conference on AI in the legal sector.* 鈥淲e鈥檝e got to deliver a safe space for our employees to use technology. And banning this is not going to be an option.鈥�

Amnesties are a solid approach to this, data protection lawyer Jenna Franklin, partner at Stephenson Harwood told an AI conference.** 鈥淎n amnesty [allows people to] basically confess what AI they鈥檙e using within the organization.鈥�

This then allows companies to see what problems they could imminently face, as well as what tools their staff find most helpful.

As AI is embedded in ever more products and services, companies will need to find out what their suppliers鈥� policies and compliance procedures are for areas such as data protection, Franklin said. 

GDPR again

Another comparatively traditional tool for compliance is already having a good regime for data protection, as many of the possible AI risks relate to customer data.

鈥淭here is a strong argument to suggest that those that invested heavily at the time of GDPR implementation are actually in a much better position now for implementing AI governance,鈥� Franklin said, referring to the EU鈥檚 General Data Protection Regulation and its UK twin.

Victoria Horden of law firm Taylor Wessing reflected a similar view, telling another conference*** that there鈥檚 a 鈥渘atural mirroring of requirements, controls, measures鈥� where businesses build AI governance on top of their data protection governance.

It鈥檚 a concept that rings true across the data protection community. At events attended by MLex in recent months, two further opinions became clear within the data protection sector. 

First, while they agree that AI compliance mirrors GDPR compliance conceptually, data protection officers do not want to be expected to be the ones policing this in their companies on top of everything else. 

They find they鈥檙e already becoming their companies鈥� de facto AI compliance officers, with or without training. And they鈥檙e already consistent in being able to share AI near misses and horror stories, albeit not on the record to journalists.  

Second, the community in London is almost unanimous in its distaste for the prospect of having to deal with the EU AI Act in any way at all. No doubt more companies will be targeting this market with technology to simplify AI compliance.

* 鈥淔ocussing on Integrating AI in Legal Settings,鈥� Flex Legal and UU裸聊直播, online, July 31, 2024
** 鈥淭he AI Summit London,鈥� June 12-13, 2024
*** 鈥淲estminster eForum: The future for data protection in the UK,鈥� online, Sept. 4, 2024