Prepare the file note deciding whether an AI-tool incident is a notifiable data breach
Key facts
- Human involvement
- RedLawyer-led
- How AI is used
- Set out the incident facts from the log. Do not decide whether notification is required.
- What the lawyer must review
- The lawyer decides, using the incident log and the OAIC notifiable data breaches page.
- Written for / version
- Written for AustraliaUS
Open a jurisdiction version of this task to see which instruments apply: US
Who does what
| Role | What they do |
|---|---|
| Assistance | Do not begin AI assistance until the responsible lawyer has defined and confirmed its permitted scope. |
| Lawyer | Perform the substantive analysis and decisions. Independently check any permitted supporting work and approve the exact output for its intended use. |
Checklist
- Confirm the output against the client’s instructions and the complete relevant source material, including omissions or contradictions.
- Resolve exceptions and record the responsible lawyer’s approval of the exact output and intended use.