DATDAT-002 — Data Privacy and Protection Failures
Personal Data Scraped Without Consent to Train Generative AI Models
4/5Sector: RetailGeography: GlobalStage: DevelopIngested: —
Executive Summary
Retailers scraping consumer data for generative AI training violate consent norms, enable harmful re-identification through data aggregation, and permanently remove individuals' ability to correct or delete their information. Boards face material regulatory exposure under UK GDPR and reputational risk as enforcement of lawful basis requirements for AI training data intensifies.
Domain
Data Management
Blindspots in data quality, privacy, bias, lineage, lifecycle, and third-party data dependencies.
Source
MIT AI Risk Repository — Generating Harms - Generative AI's impact and paths forwards (EPIC2023) ↗https://airisk.mit.edu/
Could this happen in your organisation?
A Velinor AI Audit maps your active AI portfolio against the 50+ blindspots and benchmarks against documented sector failures like this one. A board-ready foresight document in 5 weeks.