United Kingdom: Published ICO Guidance on Appropriate and Lawful Use of AI and Personal Data

On 8 November 2022, the UK Information Commissioner’s Office (ICO) published a piece of guidance titled “How to use AI and personal data appropriately and lawfully” which aims to promote an understanding of the proper use of personal data in the context of Artificial Intelligence (AI) and to help organisations identify and mitigate potential data protection risks arising from the use of AI. In particular, ICO issues the following recommendations for organisations: (1) adopting a risk-based approach in the development and deployment of AI; (2) explaining the decisions made by AI systems to affected individuals; (3) collecting only necessary data for the development of AI systems; (4) addressing risks of bias and discrimination early on; (5) preparing data appropriately by dedicating time and resources; (6) ensuring the security of AI systems; (7) ensuring meaningful human review of AI decisions; and (8) working with external suppliers to ensure appropriate use of AI.