DATDAT-002 — Data Privacy and Protection Failures
Sensitive Personal Data Exposed Through AI Model Prompts
4/5Sector: OtherGeography: GlobalStage: OperateIngested: —
Executive Summary
Users or systems are transmitting personal and sensitive personal information directly within prompts sent to AI models, creating uncontrolled data exposure. Organisations face regulatory liability under data protection law and reputational risk if such data is retained, logged, or used in model training.
Domain
Data Management
Blindspots in data quality, privacy, bias, lineage, lifecycle, and third-party data dependencies.
Source
MIT AI Risk Repository — AI Risk Atlas (IBM2025) ↗https://airisk.mit.edu/
Could this happen in your organisation?
A Velinor AI Audit maps your active AI portfolio against the 50+ blindspots and benchmarks against documented sector failures like this one. A board-ready foresight document in 5 weeks.