Intermediate
How is pseudonymisation different from anonymisation?
Use Anonymisation / De-identification when discussing reduced or removed identifiability; use Pseudonymisation when personal data can still be attributed with protected additional information.
What is differential privacy?
Use Data Anonymisation when modifying data to reduce identifiability; use Differential Privacy when limiting individual inference from outputs through a privacy framework.
Can synthetic data still create privacy risk?
Synthetic data is artificially generated data designed to resemble selected patterns, structures, or statistical properties of real data.
What is data provenance?
Data provenance is the recorded history of data, including its origin, creation, transformations, movements, and changes over time. In AI governance, provenance helps verify dataset lineage, assess trustworthiness, support audits, and understand how digital content or model inputs were produced.
What is data residency in AI?
Data residency and sovereignty concern where data is stored, processed, and governed, and which legal regimes apply to it. For regulated AI use, these concepts affect cloud-region selection, cross-border transfers, contractual controls, and compliance with sectoral or national requirements.
How do GDPR and the EU AI Act overlap?
Use GDPR when the issue is processing personal data; use the EU AI Act when the issue is AI system risk category, safety, transparency, governance, or conformity obligations.
Advanced
What is training data privacy risk?
Training data is the dataset used to teach or fit a machine learning model by adjusting its learnable parameters. Its quality, quantity, diversity, labeling, and provenance strongly influence the performance, reliability, and compliance posture of the resulting model.
What is encryption in AI data governance?
Data encryption is the transformation of readable data into an encoded form that is unintelligible without an authorized key or decryption process. It is used to protect sensitive information from unauthorized access during storage, transmission, or processing.