AI使用个人数据,先检查什么?What should be checked before using personal data in AI?
不要只问工具好不好用Look beyond tool performance
AI推荐或决策系统处理个人数据时,应同时检查数据来源、用途、授权及保护安排。AI并不会使原有数据保护义务消失。For AI recommendation or decision systems, examine data provenance, purpose, authority and protection. AI does not remove existing data-protection duties.
把角色分清楚Clarify roles
PDPC相关指引解释PDPA在AI推荐与决策系统中的应用,包括第三方开发者可能承担的数据中介责任。角色须结合实际安排判断。PDPC guidance explains PDPA application to AI recommendation and decision systems, including third-party developers that may act as data intermediaries. Roles depend on the actual arrangements.
上线前的实务问题Practical questions before deployment
数据是否会用于训练?谁能访问?会保存多久?是否传至境外?这些应由项目、数据及合规负责人核实,不能只凭“工具很安全”的宣传决定。Will data be used for training? Who can access it? How long is it retained? Is it transferred overseas? Project, data and compliance owners should verify these matters rather than rely on marketing assurances.
指引与法律的关系Guidance versus law
这份指引不是独立罚款表。需要理解的仍是适用PDPA义务及具体处理活动。The guidance is not an independent fine schedule. The focus remains applicable PDPA duties and the processing activity.
资料依据Source attribution
PDPC:AI推荐与决策系统个人数据使用咨询指引(2024) / Advisory Guidelines on use of Personal Data in AI Recommendation and Decision Systems (2024)
保留出处供核验;本页以本站整理的解读为主,不要求跳转外部网站才能阅读。Sources are identified for verification. The explanation is provided here without requiring a visit to an external site.