aai-institute / aai-institute/practical-ai-act

Inference log section missing: GDPR Art. 17 erasure conflict for logs containing user input data

Offen
#149 0 Kommentare 0 Reaktionen 0 zugewiesene Personen Auf GitHub ansehen
Vorherrschende Sprache
Python
Sterne
21
Forks
3
PR-Merge-Kennzahlen
Keine gemergten PRs in 30 T.

Beschreibung

The [inference log page](https://practical-ai-act.eu/latest/engineering-practice/inference-log/) covers Art. 12(1), 12(2), Art. 19, Art. 26(5), Art. 26(6), and Art. 72 thoroughly. There is a compliance gap that the current guidance doesn't address: inference logs that capture user input data (the common case) are simultaneously **Art. 12 retention-required evidence** and **GDPR Art. 17 erasure targets**.

**The conflict:**
- Art. 12 / Art. 19: logs must be retained to identify risks and support post-market monitoring
- GDPR Art. 17: if the user query contains personal data (a name, a health condition, a financial situation), the user can request erasure of that data

When a deployer receives a DSAR against a row that is also compliance evidence, a standard "delete-on-request" response destroys records the deployer is legally required to retain. A "retain-everything" policy violates GDPR. TTL-based retention policies cannot resolve this conflict because they have no visibility into *why* a log entry exists.

**The gap in the current guidance:**
The inference log section correctly notes that logs should capture input data for drift detection and hazard identification, but it does not flag that those same inputs may carry personal data subject to Art. 17 — or that the deployer needs to decide *at write time* how to handle a future DSAR against a compliance-required row.

**Suggested addition:**
A short note under the existing "Compliance Info" section on the inference log page flagging:
1. Inference logs containing personal data are dual-obligation records: Art. 12 retention + Art. 17 erasure
2. The conflict must be resolved at write time (not at deletion time) by annotating each log entry with its record class and retention basis
3. A reference implementation: the [lifecycle_class spec](https://github.com/agent-morrow/morrow/blob/main/lifecycle_class/spec.md) (MIT license) provides a JSON Schema-validated annotation format for this: `record_class: ["compliance", "identity"]`, `compliance_anchor.retain_until`, and a `subject_chain` linking the entry to affected data subjects

The appliedAI Institute's audience of SMEs deploying high-risk AI systems under the August 2026 deadline is exactly the population likely to discover this conflict during a DSAR they weren't expecting — and currently the guide doesn't prepare them for it.

Happy to submit a PR with the suggested text if this direction is accepted.

Beitragsleitfaden

Beitragsleitfaden öffnen

Bewertung

Dieses Issue wurde noch nicht bewertet.

Neue Issues direkt in Ihr Postfach

Eine kurze Übersicht über anfängerfreundliche GitHub-Issues.