91快色

Use of AI and Automated Systems

U91快色's Information Security Classification Standard establishes the requirements for the acceptable use of automated systems (including artificial intelligence systems) where personal information is input to generate content or make decisions, recommendations or predictions. It is important that automated systems/AI tools are used ethically and in accordance with U91快色 institutional policies and ethical guidelines. 

Where personal information is input into an automated system/AI, it must remain subject to human oversight and must be used transparently and ethically following consideration of potential bias, discrimination or unfair outcomes to ensure fairness, natural justice and public accountability. It should not be used alone to make decisions that will have serious impact on the rights of an individual, or that could have serious consequences for an individual鈥檚 life, education, career, dignity or autonomy.

Automated systems mean any system, software, process or other electronic resource that is used to generate content or make decisions, recommendations
or predictions, including those that use computation as whole or part of a system to determine outcomes, make or aid decisions, inform policy implementation, collect data or observations, or otherwise interact with individuals and/or communities. Automated systems include, but are not limited to, artificial intelligence systems (AI) or other systems derived from machine learning, statistics, or other data processing or artificial intelligence techniques, and exclude passive computing infrastructure.

The regulation of "automated systems" (rather than exclusively AI systems) captures all decision-making technologies in a field that is quickly changing and evolving. This also allows privacy legislation to focus on impact (not merely technology), including any automated processing of personal information affecting individuals, not limited strictly to the use of AI. In summary, AI is a subset of a broader category of automated systems that make decisions, recommendations or predictions.

 

If you intend to use automated systems/AI, please follow U91快色鈥檚 institutional policies and ethical guidelines:

  • Use automated systems/AI ethically and in accordance with applicable laws and U91快色鈥檚 Information Security Classification Standard which contains requirements for the acceptable use of automated systems.
  • Use only the鈥疷91快色 approved secure version鈥痮f  as it offers better security, privacy, and protection of data, and complies with U91快色鈥檚 policies and standards. If you intend to use or acquire another AI platform, please follow the U91快色 .
  • Be cautious when using Level 3 or 4 confidential or personal information with an automated system/AI tool and ensure that you are familiar with the privacy best practices in the Legal Services Guidelines for the Software Acquisition Process.
  • Obtain consent directly from individuals prior to inputting or disclosing their personal information into an automated system/AI. For questions, please contact accessandprivacy@ucalgary.ca.
  • Ensure that the rights of creators are respected and that you have the appropriate written permission to input or disclose materials protected by copyright or other intellectual property rights into an automated system/AI. For questions, please contact copyright@ucalgary.ca.
  • Use automated systems/AI subject to human oversight following considerations of potential bias, discrimination or unfair outcomes to ensure fairness, natural justice and public accountability.
  • Do not use automated systems/AI alone to make decisions that will have a serious impact on the rights of an individual, or that could have serious consequences for an individual鈥檚 life, education, career, dignity, or autonomy.
  • Be transparent and make sure to disclose when you use automated systems/AI to generate information, reports, summaries, images, etc.

U91快色 is required under section 5(2) of POPA to advise individuals at the time of collection if there is any intention to input their personal information into an automated system to generate content to make a decision, recommendations, or predictions, such as an artificial intelligence, machine-learning or deep-learning system or technology (AI). U91快色 is also required to make reasonable security arrangements against such risks as unauthorized access, collection, use, disclosure, or destruction of personal information, whether being managed using an automated system/AI or otherwise.

Frequently Asked Questions (FAQs)

Individuals must be advised at the time of collection if their personal information will be used in an automated system (including AI tools). Personal information should also only be used consistent with the stated purpose of collection. This should be addressed directly in the collection notice. Please ensure that a POPA compliant collection notice is used any time you collect personal information. For questions, please contact accessandprivacy@ucalgary.ca

Automated systems/AI may only be used for research in accordance with ethical or professional standards (including the ), contractual obligations and University policies, procedures, operating standards and guidelines relating to the conduct of research, including the Research Integrity Policy

Appropriate consent must also be obtained from research participants in accordance with applicable Research Ethics Board requirements and adherence to applicable research security policies and guidelines. Researchers should only use institutionally approved automated systems/AI tools such as the secure version of . If you intend to use or acquire another AI platform for your research, please follow the U91快色 .

U91快色 is required to conduct a PIA for any new, or a substantial change to an existing, administrative practice, program, project or service that will involve the collection, use or disclosure of certain categories of personal information. This includes where an automated system/AI tool will be used to manage the personal information. To determine whether a PIA is required for your initiative visit the link below or contact accessandprivacy@ucalgary.ca