Skip to Main Content

AI in ECU Research: Data Privacy and Security

Even if the model does not recall specific data, unauthorised individuals can still infer or reconstruct private details and violate copyrighted material or licensing agreements.

AI models require large datasets, some of which may contain sensitive or personal data. Data mismanagement can lead to breaches of privacy laws. Be FAIR and CARE (Carroll et al., 2023).

Always:

  • Consider how you will use and share the data while maintaining security and privacy.
  • Comply with Australian laws (e.g., Privacy Act 1988, Australian Privacy Principles, Australian Code for the Responsible
  • Conduct of Research) managing the use of sensitive data, and avoiding legal issues.
  • Stick to the procedures outlined in your ethics approval or participant consent documents.
  • Protect participants' data - use pseudonyms or identifiers instead of real names.
  • Remove key pieces of information that could lead to identification.

Implement CARE principles (Collective Benefit, Authority to Control, Responsibility, and Ethics) alongside FAIR principles to ensure the ethical and respectful use of AI when dealing with data from Indigenous communities.

Make sure AI systems do not create biases or harm Indigenous communities.

Place ethical considerations at the forefront of AI projects. This includes respecting Indigenous cultural values, traditions, and knowledge systems.

Involve Indigenous communities in the AI development process. 

Equip Indigenous communities with the skills needed to understand and leverage AI

 

Data Privacy Challenges

  • Web Scraping – Data can be extracted from the internet, making full protection tricky.
  • Inference Risks – Even if AI doesn’t store data, personal details can still be guessed.
  • User Sharing – People may unknowingly share sensitive information that AI later recalls.

How to Protect Privacy?

  • By Anonymisation & Encryption – Convert personal data into anonymous or encrypted forms to prevent unauthorised access.
  • By User Consent – Always get permission before collecting or processing data to build trust and comply with laws.