The Information Commissioner's Office in the UK (the
"ICO") issued its draft guidance on auditing AI
technologies. This guidance aims to provide solutions to companies
that design or implement AI, with a methodology to audit
applications to ensure that they process personal data fairly.
The guidance explains how one can assess the risks to the rights
and freedoms of individuals that AI can trigger, and the
appropriate measures to mitigate them. The guidance focuses on a
risk-based approach to AI and suggests technical and organizational
measures and procedures proportionate to the possible risks to the
rights and freedoms of individuals.
The guidance discusses the accountability and governance
implication of AI, stating that organizations shall perform a data
processing impact assessment before using AI. The assessment should
include, among others, an explanation of any relevant variation or
margins of error in the performance of the AI system, which may
affect the
