Механізми мінімізації ризиків використання штучного інтелекту в ІТ-проєктах у межах базового General Data Protection Regulation

Abstract

This paper looks at the main risks connected with the use of AI in modern IT projects under GDPR requirements. It focuses on how AI solutions are integrated to automate and optimize business and project processes, but also shows that such integration can create legal, organizational, and technical issues related to personal data. To reduce these risks, the paper considers a risk-based approach that includes privacy by design, data minimization, risk assessment, and human oversight. It also refers to the general principles of ISO 31000 and ISO/IEC 42001. The results show that effective AI implementation requires not only technical development, but also proper management and compliance control.