RT AI TOOLKIT

Section 2/5: Customer Risk Issues

Your organisation may be engaging customers in the development and deployment of AI Systems when your organisation uses AI Systems to enhance goods and services provided to customers or provides AI Products to customers. For the purpose of this section “AI Products” refer to goods and services provided to customers that incorporate an AI System.  

Does your organisation have an acceptable use policy in place for customers to ensure they do not use AI Products in an unlawful or unauthorised manner?

 
 
 
 
 

Does your organisation inform customers before using their personal data in your organisation’s AI Systems and/or AI Products?

 
 
 
 
 

Does your organisation obtain explicit consent from customers before using their personal data in your organisation’s AI Systems and/or AI Products?

 
 
 
 
 

Does your organisation have a written policy that explains to customers how their personal data is used in your organisation’s AI Systems and/or AI Products?

 
 
 
 
 

Does your organisation have clearly defined roles and responsibilities in the process of developing and supplying the AI Products to customers?

 
 
 
 
 

Does your organisation have clearly defined roles and responsibilities that safeguard the deployment of AI into customer facing products or services?

 
 
 
 
 

Does your organisation identify, monitor, and implement industry standards relevant to the deployment of AI into customer facing products or services?

 
 
 
 
 

Do your organisation’s contracts with customers contain adequate and appropriate clauses for allocating liabilities arising from the use of AI Products?

 
 
 
 
 

Does your organisation define and publish communication channels for customers to utilise when the AI component of products perform in a way that may cause harm or distress?

 
 
 
 
 

Does your organisation have a written policy that ensures the data upon which the AI product is built aligns with the purpose that the AI is to be used by the customer, and is tested for the existence of bias?

 
 
 
 
 

Does your organisation have measures in place to ensure that any personal data used in AI Systems for making decisions about customers is complete, accurate, and consistent?

 
 
 
 
 

Does your organisation make reasonable efforts to ensure customers do not use AI Products to host, display, or upload information that is unlawful?

 
 
 
 
 

Does your organisation have mechanisms in place to ensure that any AI Products offered are not likely to cause any detrimental effect on the well-being of a child, or do not involve tracking, behavioural monitoring or targeted advertisements directed at children?

 
 
 
 
 

Does your organisation have established procedures that customers may invoke to exercise their rights (such as, the right to access, correction, erasure, or grievance redressal) in relation to the use of their personal data in your organisation’s AI Products?

 
 
 
 
 

Does your organisation provide an option to customers to opt-out/withdraw their consent, if applicable, from the use of their personal data in your organisation’s AI Systems?

 
 
 
 
 

If your organisation is a registered stockbroker or depository participant which uses AI Systems for customer product offerings, compliance or management purposes, do you have mechanisms in place to submit quarterly reports about such use to the Securities and Exchange Board of India?

 
 
 
 
 

Does your organisation have adequate measures in place to ensure the privacy, security, and integrity of the customers’ data when using AI Systems, including ensuring responsibility for the output arising from the use of such systems?

 
 
 
 
 

Does your organisation make disclosures to customers about using AI Systems to provide investment advice?

 
 
 
 
 

Question 1 of 18