How should I decommission AI models and training data?

Answered

Involve Data Custodians and securely delete applicable data and configuration details when decommissioning a model or system. Plan end-of-life in contracts and operations, not as an afterthought.

From the guidance

Primary (how) Code of Practice for the Cyber Security of AI

If a Developer or System Operators decides to decommission a model and/or system, they shall involve Data Custodians and securely delete applicable data and configuration details.

Section: Principle 13: Ensure proper data and model disposal

Read this in Code of Practice for the Cyber Security of AI (opens in new tab)

Secondary (normative) Guidelines for AI procurement

Consider what the end-of-life processes for your AI system and the data should look like. Ensure the contract includes such considerations.

Section: End-of-life

Read this in Guidelines for AI procurement (opens in new tab)

Related questions

• Can attackers steal my model or training data through the API? Security and safe use of tools
• What should I require from AI suppliers on transparency, bias and training data? Buying and building
• What is data poisoning in an AI system? Security and safe use of tools
• Can I use AI to process personal data? Lawful, ethical and responsible use
• When should I use the Data and AI Ethics Framework? Getting started