{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"ai_governance","domain":["AI Governance","Data Protection & Privacy"],"inherent_rating":"high","taxonomy":["nist-ai-rmf-risk","nist-privacy-risk"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Aai-privacy-leakage","description":"Model inversion and membership-inference attacks reconstruct training data or reveal individuals in the training set; AI inference re-identifies anonymized data and infers sensitive attributes; training on data without consent/legal basis creates regulatory liability.","details":{"category":"ai_governance","impact":"high","inherent_rating":"high","likelihood":"medium","risk_id":"ai-privacy-leakage","taxonomies":["nist-ai-rmf-risk","nist-privacy-risk"],"treatment":"mitigate"},"id":"risk:ai-privacy-leakage","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Aai-privacy-leakage","sourceIds":["aiuc-1","eu-ai-act","hipaa","iso-27001","iso-42001","nist-800-53","nist-ai-agent-identity","nist-ai-tevv-athlon"],"sourceUrl":null,"title":"AI privacy leakage and re-identification","type":"risk"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:1061cf8c5c123a904d3c84b27c9274fac6b849670bdbad164cecffc959710362","properties":{"rationale":"Governing lawful data acquisition and provenance addresses training on data without consent or legal basis.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-09-d6934cb6.json","sourceId":"uc:UC-AI-09","targetDetailPath":"/data/v1/records/risk-ai-privacy-leakage-9aa8d83c.json","targetId":"risk:ai-privacy-leakage","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:6d82ad1149ccf222a896df54517800e494b50e8ecae50c3d8ed81945a1b1a668","properties":{"rationale":"Declared training-use and retention limits reduce the volume of customer data an AI system can later leak, but the operative defenses are the output and isolation controls.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-17-420198e3.json","sourceId":"uc:UC-AI-17","targetDetailPath":"/data/v1/records/risk-ai-privacy-leakage-9aa8d83c.json","targetId":"risk:ai-privacy-leakage","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:a3d7e648d87833dee50f44a6d87a6c3daadb224ac3ff6d641c02bcb1d77590df","properties":{"rationale":"The same redaction pipeline that catches secrets in logs and outputs also reduces exposure of personal data held alongside them.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-22-129d1e22.json","sourceId":"uc:UC-AI-22","targetDetailPath":"/data/v1/records/risk-ai-privacy-leakage-9aa8d83c.json","targetId":"risk:ai-privacy-leakage","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:c59b52e616b08f549f872fb76832769ea6adad3fb38cb731b2fde42e7437b8e3","properties":{"rationale":"Blocking injected instructions that try to exfiltrate context reduces one avenue for personal-data leakage.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-18-f15ac93a.json","sourceId":"uc:UC-AI-18","targetDetailPath":"/data/v1/records/risk-ai-privacy-leakage-9aa8d83c.json","targetId":"risk:ai-privacy-leakage","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:d8e98edb473b5d39c46ddf7c5ec273d5782f1e65f05be494aaa256fec9e38805","properties":{"rationale":"Withholding internal data and over-exposed content from outputs reduces personal-data leakage at the response boundary.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-20-c0e507ce.json","sourceId":"uc:UC-AI-20","targetDetailPath":"/data/v1/records/risk-ai-privacy-leakage-9aa8d83c.json","targetId":"risk:ai-privacy-leakage","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ea0857f1471c448528c386dedf7737383f16319ad8aa316a3aa3f3e4ae295328","properties":{"rationale":"Robust de-identification reduces AI inference re-identifying anonymized data and inferring sensitive attributes.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-data-12-c5a5999a.json","sourceId":"uc:UC-DATA-12","targetDetailPath":"/data/v1/records/risk-ai-privacy-leakage-9aa8d83c.json","targetId":"risk:ai-privacy-leakage","type":"mitigates"}],"schemaVersion":1}