BackPrivacy infringement
Privacy infringement
Risk Domain
AI systems that memorize and leak sensitive personal data or infer private information about individuals without their consent. Unexpected or unauthorized sharing of data and information can compromise user expectation of privacy, assist identity theft, or cause loss of confidential intellectual property.
"Leaking, generating, or correctly inferring private and personal information about individuals"(p. 30)
Entity— Who or what caused the harm
Intent— Whether the harm was intentional or accidental
Timing— Whether the risk is pre- or post-deployment
Part of Information & Safety Harms
Other risks from Weidinger et al. (2023) (26)
Representation & Toxicity Harms
1.0 Discrimination & ToxicityAI systemUnintentionalPost-deployment
Representation & Toxicity Harms > Unfair representation
1.1 Unfair discrimination and misrepresentationAI systemUnintentionalPost-deployment
Representation & Toxicity Harms > Unfair capability distribution
1.3 Unequal performance across groupsAI systemUnintentionalPost-deployment
Representation & Toxicity Harms > Toxic content
1.2 Exposure to toxic contentAI systemUnintentionalPost-deployment
Misinformation Harms
3.0 MisinformationAI systemOtherPost-deployment
Misinformation Harms > Propagating misconceptions/ false beliefs
3.1 False or misleading informationAI systemOtherPost-deployment