AI Data Governance: The Critical Role of Provenance and Rights in Mitigating AI Risks

This article highlights the critical importance of data governance, provenance, and legal rights in managing AI risks, particularly concerning training data. For internal audit and assurance professionals, this underscores the necessity of robust controls over data sourcing, licensing, and consent to prevent significant financial, legal, and reputational damage. The parallels drawn with financial industry regulations like BCBS 239 emphasize that traceability and accountability for AI training data are not merely best practices but essential risk management imperatives.