多元資訊關聯推斷個人身份
Operation & Monitoring
Risk Description
LLMs can associate fragmented information scattered across different sources. While each fragment alone may not constitute a privacy risk, combined they can infer personal identity, health conditions, or financial situations. For example, combining public social media posts, geolocation check-ins, and purchase records, AI can infer political leanings, religious beliefs, or even sexual orientation.
Framework Mappings
iso 23894R1
tw principle隱私保護與數據治理
tw risk type技術設計缺陷(Technical Design Flaw)
Controls English translation pending
- 關聯推斷偵測
- 資訊分離原則
Implementation Steps English translation pending
- 實施資訊分離原則,限制 AI 系統可同時存取的數據來源範圍
- 部署關聯推斷偵測機制,當輸出可能洩露敏感推斷時觸發警報
- 對包含多來源資訊的查詢實施額外的隱私審查
- 建立個人資料關聯度評分,超過閾值時自動遮罩敏感推斷