Harnessing the Benefits of AI While Reducing the Harms

At the very least, ICTC proposes that we must clearly establish the following rights and obligations: 1) A requirement for proactive and responsible disclosure around the use of automated and semi-automated decision-making systems, so that individuals may be aware of and understand the implications associated with the intended use of their data. [...] The right to an explanation could depend on factors including: 1. The level of sensitivity of the personal information being used 2. The type of decision being made; or 3. The severity of potential outcomes for the individual, should a decision be made. [...] No action should be required on the part of the individual to protect their privacy − it is built into the system, by default.” This principle could entail elements such as: −. “Purpose Specification – the purposes for which personal information is collected, used, retained and disclosed shall be communicated to the individual (data subject) at or before the time the information is collected. [...] It is recognized that empowering and enabling data subjects to have agency and an active role in the managing their own data is one of the most effective checks against the misuse of personal data and abuse of privacy. [...] The greater the sensitivity of the data, the clearer and more specific the quality of the consent required.