Artificial Intelligence & Machine Learning , Events , Geo Focus: Asia

AI Implementation Demands Governance Before Deployment

Organizations implementing artificial intelligence often rush to deployment without establishing proper governance frameworks, creating significant risks for global compliance and data protection. This has made governance a critical challenge for businesses operating across multiple jurisdictions, according to Tarun Samtani, advisory board member at International Association of Privacy Professionals and CyberEdBoard member.

See Also: Why the Future of Security Is Identity

The complexity extends beyond policy creation to encompass fundamental organizational changes. Companies must establish governance committees, train staff on AI implications and create comprehensive frameworks that work across borders while maintaining compliance with regulations such as GDPR, CCPA and China's PIPL. This requires balancing innovation needs with privacy requirements, particularly in data-heavy industries where the pressure to innovate conflicts with compliance obligations.

CIOs and CISOs are extremely busy right now, being pulled into all business units to look at different AI use cases. The key is to engage the right legal compliance, AI privacy officers, and build a governance team or committee with diverse stakeholders who can have varied views of AI use cases, Samtani said. "It's not about a CIO responsibility for embedding AI within products and services. It's about having a collective view and doing the right things in the right way, in accordance with the right regulation."

In this video interview with Information Security Media Group at the GovWare Conference and Exhibition 2024, Samtani also discussed:

• How global organizations can navigate regional data protection standards;
• The balance between innovation and privacy compliance in data-heavy industries;
• Strategies for implementing effective AI governance frameworks.

Samtani has more than 20 years of experience in information security and data privacy at companies such as Morgan McKinley, Quantas and International SOS. He focuses on enhancing privacy practices, influencing compliance strategies and promoting effective governance frameworks within organizations. He is also a CyberEdBoard member.

CyberEdBoard is ISMG's premier members-only community of senior-most executives and thought leaders in the fields of security, risk, privacy and IT. CyberEdBoard provides executives with a powerful, peer-driven collaborative ecosystem, private meetings and a library of resources to address complex challenges shared by thousands of CISOs and senior security leaders located in 65 different countries worldwide.

Join the Community - CyberEdBoard.io.

Apply for membership