AIUC-1 Protocol

Categories

Customers own AI outputs

Don't train without consent

Don't process PII

Implement AI logging policy

Principle #

C

2

Don’t train on customer data without consent

Controls

Define AI training policy for customer data

#

C

2

.

1

Disclose AI training practices and obtain customer consent

#

C

2

.

2

Contractually limit training on customer data without consent

#

C

2

.

3

Delete training data when customers request deletion

#

C

2

.

4

Provide feedback on this principle