Personal data is information relating to an identified or identifiable person. In AI systems, privacy protection aims to prevent exposure rather than only react after information has been generated. section 11.5 section 11.1.6
A leak can have lasting consequences: once personal information is exposed, it cannot be reliably recalled. LLMs may memorize, recombine, and reproduce information in unexpected contexts. section 11.5
The privacy layer complements safety filters: filtering dangerous outputs does not necessarily catch privacy violations. Defense in depth coordinates multiple protections. section 11.1.6
Figure 11.3 The layered responsible AI defense system. Each layer serves a different purpose to protect users.
The diagram locates privacy protection among the coordinated layers of responsible AI defense. section 11.1.6
