S0050Critical

多元資訊關聯推斷個人身份

Operation & Monitoring

Risk Description

LLMs can associate fragmented information scattered across different sources. While each fragment alone may not constitute a privacy risk, combined they can infer personal identity, health conditions, or financial situations. For example, combining public social media posts, geolocation check-ins, and purchase records, AI can infer political leanings, religious beliefs, or even sexual orientation.

Framework Mappings

iso 23894R1
tw principle隱私保護與數據治理
tw risk type技術設計缺陷(Technical Design Flaw)

Controls English translation pending

  • 關聯推斷偵測
  • 資訊分離原則

Implementation Steps English translation pending

  1. 實施資訊分離原則,限制 AI 系統可同時存取的數據來源範圍
  2. 部署關聯推斷偵測機制,當輸出可能洩露敏感推斷時觸發警報
  3. 對包含多來源資訊的查詢實施額外的隱私審查
  4. 建立個人資料關聯度評分,超過閾值時自動遮罩敏感推斷