IAPP

Why AI Governance Is Landing on Privacy’s Desk (and What to Do About It) What happened A growing chorus of voices in the data protection world is pointing to the same trend: AI governance responsibilities are being handed to privacy teams. The International Association of Privacy Professionals (IAPP) has published several pieces on the subject, most notably “When AI governance lands on privacy’s desk” and “No new acronyms required: Governing AI without ‘AI law’.” The message is clear: organisations are not waiting for dedicated AI legislation. Instead, they are leaning on existing privacy frameworks—GDPR, CCPA, and others—to manage the risks that AI systems introduce. ...

How AI Governance Is Changing Your Privacy Rights (and What to Do About It) If you have ever received a puzzling loan denial, a strange recommendation, or an automated decision that you couldn’t explain, artificial intelligence was probably involved. For years, the rules around AI were vague. That is starting to change—and privacy professionals are the ones writing the new playbook. ...

When AI Oversight Becomes a Privacy Job: What It Means for Your Data If you follow tech news, you’ve probably noticed that governments and companies are scrambling to figure out how to govern artificial intelligence. But here’s something less obvious: a lot of that work is landing on the desks of privacy professionals. The International Association of Privacy Professionals (IAPP) recently covered this shift, and it’s worth understanding—not just for corporate compliance teams, but for anyone who uses AI-powered tools. ...

AI Governance Is Now a Privacy Issue: What It Means for Your Data If you’ve been following privacy news, you might have noticed a shift. The people inside companies who used to worry only about data breaches and consent forms are now also being handed responsibility for artificial intelligence. The International Association of Privacy Professionals (IAPP) has been covering this trend closely, including in a recent article titled “When AI governance lands on privacy’s desk.” For anyone who cares about how their personal information is handled, this change matters more than it might seem. ...

When AI Governance Lands on Privacy’s Desk: What It Means for Your Data A quiet shift is happening inside many companies. The people responsible for your privacy are now also being asked to oversee how artificial intelligence uses your information. For consumers, this change is worth understanding—because it affects how your data is handled when you use AI‑powered services, from chatbots to recommendation engines. ...

AI Governance Meets Privacy: What It Means for Your Personal Data A growing number of new laws and proposals are positioning privacy regulators as the primary enforcers of AI oversight. That shift might sound like a procedural detail, but for anyone who uses online services, fills out web forms, or interacts with chatbots, it could change how companies handle your personal data. Here’s a look at what’s happening, why it matters, and what you can do about it. ...

Why You Need a Records Retention Plan Before Building Anything with AI Introduction Every week brings news of another organization rushing to deploy AI tools—feeding customer data, internal emails, or years of transaction logs into large language models. The promise is real, but so is the risk. Among the many pieces of advice circulating in privacy circles, one principle is quietly gaining traction: get your records retention practices right before you touch AI. The International Association of Privacy Professionals (IAPP) recently published guidance framing retention policies as a prerequisite for responsible AI use, and it’s a message worth taking seriously. ...

Before You Let AI Loose on Your Data, Get Your Records Retention in Order Adopting AI tools that process personal data is rarely a simple plug-and-play decision. Many organizations focus on model accuracy, training data, or integration challenges. But a foundational step often gets overlooked: updating records retention policies. Without a solid retention framework, AI deployments can lead to compliance failures, privacy violations, and regulatory penalties. Recent guidance from the International Association of Privacy Professionals (IAPP) underscores this point—records retention should be a prerequisite, not an afterthought. ...