9. of Inference
A neural network makes customer-related decisions, but nobody can really explain to the customers what the model is based on.
Threat |
|
If you are using a neural network to make decisions based on the data of EU citizens, the GDPR requires that you are able to explain why that neural network made a certain decision about them from their data. If you are unable to explain the model itself, it is impossible to explain why the system may have made such a decision. |
|
GDPR |
Chapter 1, Art. 4 – 4. Chapter 3, Art. 22 – 1. Recital 71 |
CCPA & CPRA |
CCPA 1798.185. Regulations (a)(16) |
OECD |
Part 2, 7. Collection Limitation Principle |