Data Privacy
Privasi Data
The rules about whose personal data you may hold, and what you must do with it.
Data privacy law says what an organisation may do with information about identifiable people: collect it only for a stated purpose, keep it only as long as needed, protect it, and let the person see and correct it.
For AI systems this lands on two places. Training data: a model trained on material a person wrote may itself be a processing of that person's data. And prompts: every question a user types may contain personal information that then travels to a provider's servers and into logs.
The practical checklist for an organisation: know what you send to which provider, in which region, and how long it is kept there. Most of the compliance risk in AI projects is not exotic. It is a customer record pasted into a prompt without noticing.
Related terms
Compliance
Meeting the legal rules that apply to what you built, in the place you built it.
Guardrails
Checks that stop or constrain an action before it happens.
Local LLM
Running the model on your own machine or server, with no provider in the loop.
Data Governance
The rules and habits that decide what data exists, who may use it, and how long it lives.
PII
Information that identifies a person, directly or through a combination of details.
Want this working inside your team?
It starts with one conversation about your workflow.