The ICO provides a short, eight question checklist for developers and users of AI to ask when designing systems that use AI. This checklist is designed to ensure you do not break data protection laws when using AI systems.  

Format: Blog Post 

Estimated reading time: 4 minutes  

Resource link: 

Generative AI: eight questions that developers and users need to ask 

Topic list:  

• What is your lawful basis for processing personal data? 
• Are you a controller, joint controller or a processor? 
• Have you prepared a Data Protection Impact Assessment (DPIA)? 
• How will you ensure transparency? 
• How will you mitigate security risks? 
• How will you limit unnecessary processing? 
• How will you comply with individual rights requests? 
• Will you use generative AI to make solely automated decisions? 

How to use this resource:  

Use this resource when designing systems that use AI to make sure your system is not breaking any data protection laws.  

Source Creditability:  

The Information Commissioner’s Office is an independent body that upholds information rights.