On February 19, 2020, the Information Commissioner’s
Office (ICO), the data protection regulator in the United Kingdom,
launched a consultation on its draft guidance on the artificial intelligence (AI)
auditing framework.
The ICO states that it understands the distinct benefits which
AI can bring, but also the risks it can pose to the rights and
freedoms of individuals. AI is therefore one of ICO’s top
three strategic priorities, and it is why the ICO decided to
develop a framework for auditing AI compliance with data protection
obligations. The framework comprises (i) auditing tools and
procedures that the ICO will use in audits and investigations and
(ii) the draft guidance, which includes indicative risk and control
measures that organizations and individuals can deploy when they
use AI to process personal data. The framework connects with other
work streams undertaken by the ICO in relation to AI, including as
to how organizations can best explain their use of AI
