The french CNIL has published a Frequently Asked Questions (FAQ) on the use of generative AI systems within organizations.
It notably highlights a benefits/limitations approach, basic advice on choosing an AI system and its deployment method, and, of course, the supervision and governance of the system (DPO? Ethics Committee?).
Here is the complete list of questions from the CNIL’s first FAQ:
- What are the benefits of generative AI?
- What are the limitations and risks of generative AI systems?
- What approaches are available today for using generative AI (off-the-shelf model, fine-tuning, RAG, etc.)?
- How do you choose your generative AI system?
- Which deployment method should be preferred (on-premise, API, cloud)?
- How can you implement and supervise the use of a generative AI system?
- How can you train and raise awareness among end-users of these systems?
- What governance should be implemented for these systems?
- How can you ensure that the use of a generative AI system complies with GDPR?
- How can you ensure that the use of a generative AI system complies with the European AI regulation?
https://www.cnil.fr/fr/les-questions-reponses-de-la-cnil-sur-lutilisation-dun-systeme-dia-generative