Creating a data retention policy for personal information and AI

Brought to you by Contoural

As privacy requirements continue to expand, many organizations are developing data retention policies to support the compliant retention and disposition of personal information. They often quickly discover, however, that stand-alone privacy retention policies can conflict with records management obligations and other compliance requirements.

At the same time, organizations are facing new questions around AI. They are trying to determine what information created in connection with AI use must be retained, how long it should be kept, and whether AI-generated output should be treated differently. Business units also raise practical concerns, emphasizing that information must remain available to support ongoing operations. On the other side of the equation, companies are working to decide what data can and should be used to train, support or feed AI systems.

In this session, Tom Mighell, Kerry Childe, CIPP/US, CIPM, and Mark Diamond from Contoural discuss how to create data retention policies that are compliant, aligned with other obligations, and practical to execute in real-world environments.

• View presentation