S0051Significant

生成式 AI 使用者數據過度收集

Operation & Monitoring

Risk Description

Generative AI tools collect and retain extensive user interaction data during use, including prompts, uploaded document contents, conversation histories, and usage patterns. This data may contain highly sensitive personal or business information. Users often lack awareness of data retention scope and duration, and effective deletion mechanisms. Data may be used for model training, further expanding privacy risks.

Framework Mappings

iso 23894R1
tw principle隱私保護與數據治理
tw principle問責
tw risk type部署互動問題(Deployment Interaction)

Controls English translation pending

  • 數據最小化原則
  • 透明化數據使用政策

Implementation Steps English translation pending

  1. 實施數據最小化原則,僅收集服務所必需的最少數據
  2. 提供明確的數據保留政策和自助式數據刪除功能
  3. 建立企業使用的數據處理協議(DPA),明確禁止用於訓練
  4. 定期審計數據收集範圍,確保符合 GDPR / 個資法要求