ICO consults on draft AI auditing framework guidance for organisations

The Information Commissioner’s Office (ICO) has launched a consultation focused on the organisation’s draft guidance on the Artificial Intelligence (AI) auditing framework. The guidance contains advice on how to understand data protection law in relation to AI and recommendations for organisational and technical measures to mitigate the risks AI poses to individuals. In addition, the guidance provides a solid methodology to audit AI applications and ensure they process personal data fairly.

Aimed at both technology specialists developing AI systems and risk specialists whose organisations use AI systems, this guidance will help in assessing the risks to rights and freedoms that AI can cause; and the appropriate measures that may be implemented to mitigate them.

The ICO supports innovation and understands the benefits AI can bring as well as the risks. The organisation wishes to engage, educate and influence those innovating to ensure data protection can be built-in to AI systems in practice.

This is the first piece of guidance published by the ICO that has a broad focus on the management of several different risks arising from AI systems as well as governance and accountability measures. It’s essential for the guidance to be both conceptually sound and applicable to real-life situations as it will shape how the ICO will regulate in this space. This is why feedback from those developing and implementing these systems is essential.

The ICO is seeking feedback from those with a compliance focus (such as data protection officers, general counsel and risk managers) and also technology specialists, including machine learning experts, data scientists, software developers and engineers and cyber security/IT risk managers.

*Responses to this consultation may be submitted via the ICO’s online survey. The consultation closes at 5.00 pm on Wednesday 1 April

**The ICO will also be running a webinar on Wednesday 26 February at 2.00 pm. During the webinar, Dr Reuben Binns, the ICO’s post-doctoral research Fellow in AI, will discuss the content of the guidance in more detail and outline next steps in the AI auditing framework project

About the Author
Brian Sims BA (Hons) Hon FSyI, Editor, Risk UK (Pro-Activ Publications) Beginning his career in professional journalism at The Builder Group in March 1992, Brian was appointed Editor of Security Management Today in November 2000 having spent eight years in engineering journalism across two titles: Building Services Journal and Light & Lighting. In 2005, Brian received the BSIA Chairman’s Award for Promoting The Security Industry and, a year later, the Skills for Security Special Award for an Outstanding Contribution to the Security Business Sector. In 2008, Brian was The Security Institute’s nomination for the Association of Security Consultants’ highly prestigious Imbert Prize and, in 2013, was a nominated finalist for the Institute's George van Schalkwyk Award. An Honorary Fellow of The Security Institute, Brian serves as a Judge for the BSIA’s Security Personnel of the Year Awards and the Securitas Good Customer Award. Between 2008 and 2014, Brian pioneered the use of digital media across the security sector, including webinars and Audio Shows. Brian’s actively involved in 50-plus security groups on LinkedIn and hosts the popular Risk UK Twitter site. Brian is a frequent speaker on the conference circuit. He has organised and chaired conference programmes for both IFSEC International and ASIS International and has been published in the national media. Brian was appointed Editor of Risk UK at Pro-Activ Publications in July 2014 and as Editor of The Paper (Pro-Activ Publications' dedicated business newspaper for security professionals) in September 2015. Brian was appointed Editor of Risk Xtra at Pro-Activ Publications in May 2018.

Related Posts