Beginner
What is personal data in AI?
Personal data is information relating to an identified or identifiable natural person under data protection law. In EU contexts, its meaning is tied to Article 4(1) of Regulation (EU) 2016/679 and related legal interpretation.
What is special-category data in AI?
Special categories of personal data are highly sensitive types of personal data identified in EU data protection law.
Is biometric data personal data?
Biometric data is personal data produced by specific technical processing of a person's physical, physiological, or behavioral characteristics. Examples include facial images, fingerprints, voice patterns, gait, and other identifiers that can support recognition or identification.
What is anonymisation in AI data governance?
Anonymisation and de-identification are techniques used to reduce the risk that individuals can be identified from a dataset. In practice, irreversible anonymisation can be difficult, especially when datasets can be linked with other information.
Intermediate
How is pseudonymisation different from anonymisation?
Use Anonymisation / De-identification when discussing reduced or removed identifiability; use Pseudonymisation when personal data can still be attributed with protected additional information.
What is differential privacy?
Use Data Anonymisation when modifying data to reduce identifiability; use Differential Privacy when limiting individual inference from outputs through a privacy framework.
Can synthetic data still create privacy risk?
Synthetic data is artificially generated data designed to resemble selected patterns, structures, or statistical properties of real data.
What is data provenance?
Data provenance is the recorded history of data, including its origin, creation, transformations, movements, and changes over time. In AI governance, provenance helps verify dataset lineage, assess trustworthiness, support audits, and understand how digital content or model inputs were produced.
What is data residency in AI?
Data residency and sovereignty concern where data is stored, processed, and governed, and which legal regimes apply to it. For regulated AI use, these concepts affect cloud-region selection, cross-border transfers, contractual controls, and compliance with sectoral or national requirements.
How do GDPR and the EU AI Act overlap?
Use GDPR when the issue is processing personal data; use the EU AI Act when the issue is AI system risk category, safety, transparency, governance, or conformity obligations.
Advanced
What is training data privacy risk?
Training data is the dataset used to teach or fit a machine learning model by adjusting its learnable parameters. Its quality, quantity, diversity, labeling, and provenance strongly influence the performance, reliability, and compliance posture of the resulting model.
What is encryption in AI data governance?
Data encryption is the transformation of readable data into an encoded form that is unintelligible without an authorized key or decryption process. It is used to protect sensitive information from unauthorized access during storage, transmission, or processing.