Federal, provincial and territorial privacy authorities have launched a set of principles to advance the responsible, trustworthy and privacy-protective development and use of generative artificial intelligence (AI) technologies in Canada.
AI is an advanced form of information processing created for the purpose of automating and/or enhancing the performance of human tasks. Generative AI is a subset of machine learning in which systems are trained on massive information sets – often including personal information.
While AI presents potential benefits across many domains and in everyday life, the regulators note that there are also risks and potential harms to privacy, data protection, and other fundamental human rights if these technologies are not properly developed and regulated.
Organizations have a responsibility to ensure that products and services that are using AI comply with existing domestic and international privacy legislation and regulation.
The high level principles are intended for organizations that develop, customize or implement generative artificial intelligence for their clients. In Alberta, smaller custodians that are more likely to buy AI products directly from vendors can refer to the Guidance for Small Custodians on the use of Artificial Intelligence.
The joint document lays out how key privacy principles apply when developing, providing, or using generative AI models, tools, products and services. These include:
- establishing legal authority for collecting and using personal information and, when relying on consent, ensuring that it is valid and meaningful;
- being open and transparent about the way information is used and the privacy risks involved;
- making AI tools explainable to users;
- developing safeguards for the protection of privacy rights; and
- limiting the sharing of personal, sensitive or confidential information.
Developers are also urged to take into consideration the unique impact that these tools can have on vulnerable groups, including children.
The document provides examples of best practices, including implementing “privacy by design” into the development of the tools, and the labelling content created by generative AI.
Click here to read the Principles for Responsible, Trustworthy and Privacy-Protective Generative AI Technologies.
