Lawful, ethical and responsible use

• Can I use AI to process personal data?
• Do I need a Data Protection Impact Assessment (DPIA) before using AI? Contrasting
• Can I reuse existing personal data to train or run an AI system?
• Can AI make automated decisions that affect people?
• How much human oversight do I need when using AI in decision making?
• Do I need to tell the public when we are using AI or algorithms? Contrasting
• Do I need to use the Algorithmic Transparency Recording Standard (ATRS)?
• Which organisations must use the Algorithmic Transparency Recording Standard?
• Which algorithmic tools need an ATRS record?
• At what stage in development must I publish an ATRS record?
• Can I skip an ATRS record if some of the information is exempt from FOI?
• How do I publish an ATRS record?
• Can local government, police or other public bodies publish ATRS records?
• When should I update or retire an ATRS record?
• Who in my organisation owns ATRS records?
• How do I manage bias and fairness in an AI system? Contrasting
• What equality and human rights issues should I consider when using AI?
• Do I need legal advice before starting an AI project?
• What lawful basis can a public authority use for AI that processes personal data?
• Do training and deploying an AI model need separate lawful bases?
• Can I rely on consent to process personal data in an AI system?
• What does data-protection fairness require of an AI system?
• What safeguards does Article 22 require for solely automated decisions?
• Do AI inferences about people count as special category data?
• Do I need an Equality Impact Assessment for an AI project?
• What does privacy by design mean for an AI project?
• Should I publish my DPIA and Equality Impact Assessment? Contrasting
• When should I use the Ethics, Transparency and Accountability Framework for Automated Decision-Making?
• Should automated decision-making be the default solution for complex policy problems?
• Do significant automated decisions need ministerial agreement?
• Should we publish algorithms used for automated decision-making? Contrasting
• Do automated decision-making systems need legal sign-off?
• Can I use proxy or generalised social datasets for automated decisions about individuals?
• Should we red-team automated decision-making systems before go-live?
• How often should we formally review an automated decision-making system?
• If we contract out AI processing, who owns equality compliance?
• Can councils merge DPIA and Equality Impact Assessment for AI buys? Contrasting
• Do I need an Algorithmic Impact Assessment in the UK?