Standards & regulations
AI Privacy & Data Protection
Understand the context before choosing the control.
Map personal information across collection, training, prompts, retrieval, outputs and retention. Determine the relevant obligations for each processing context.
A practical assessment lens
- 01Purpose
- 02Entity & role
- 03Data & stakeholders
- 04Applicable source
- 05Evidence & review
This overview supports scoping and discussion. It is not a substitute for determining which current legal, sector or contractual requirements apply to the organization. Assign a named owner to maintain the assessment and record the basis of each applicability decision.
Translate context into action
- 01Accountable owner
- 02Control objective
- 03Operational evidence
- 04Review trigger
Reference checked 9 September 2026. Recheck the source when making an applicability decision.
Make your next AI decision count.
Discuss your ambitions, constraints and next practical steps with MAST.