{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"canonicalUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-AI-12","description":"Define objectives and documented processes for responsible use of AI systems, and ensure each system is used only in accordance with its intended use and accompanying documentation. Screen proposed and existing uses against legal prohibitions on unacceptable practices — such as manipulative techniques, social scoring, and untargeted facial-image scraping — and block or discontinue prohibited uses. Retain use approvals and screening records.","details":{"control_category":"administrative","control_type":"preventive","domain":"AI Governance","guidance":[],"members":[{"control_id":"A.9.2","coverage":"full","framework":"iso-42001","relationship":"superset_of"},{"control_id":"A.9.3","coverage":"full","framework":"iso-42001","relationship":"superset_of"},{"control_id":"A.9.4","coverage":"full","framework":"iso-42001","relationship":"superset_of"},{"control_id":"AIA-Art5","coverage":"full","framework":"eu-ai-act","relationship":"superset_of"},{"control_id":"A007","coverage":"partial","delta":"output-level safeguards against copyright, trademark, and other third-party intellectual-property infringement by generated content","framework":"aiuc-1","relationship":"intersects_with"},{"control_id":"E010","coverage":"partial","delta":"establish and implement an end-user AI acceptable use policy, with violation detection and user notifications beyond intended-use and legal-prohibition screening","framework":"aiuc-1","relationship":"intersects_with"}],"statement":"Define objectives and documented processes for responsible use of AI systems, and ensure each system is used only in accordance with its intended use and accompanying documentation. Screen proposed and existing uses against legal prohibitions on unacceptable practices — such as manipulative techniques, social scoring, and untargeted facial-image scraping — and block or discontinue prohibited uses. Retain use approvals and screening records.","title":"Enforce responsible and lawful use of AI systems","unified_id":"UC-AI-12"},"id":"uc:UC-AI-12","mapUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-AI-12","sourceIds":["aiuc-1","eu-ai-act","iso-42001"],"sourceUrl":null,"title":"UC-AI-12 — Enforce responsible and lawful use of AI systems","type":"unified"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:0b7998bda23369bf2065e5064658c1bf2e7ded598cf2518dd516ce75de538017","properties":{"rationale":"Screening and blocking social scoring reduces unwarranted algorithmic gatekeeping and restriction.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-12-ff5c3c6a.json","sourceId":"uc:UC-AI-12","targetDetailPath":"/data/v1/records/risk-data-privacy-harms-to-individuals-510e65af.json","targetId":"risk:data-privacy-harms-to-individuals","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:0df296ddd945dd750951210caae2c0fb03d0e607632e5f61315da38869fb0687","properties":{"control_id":"A.9.3","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-12-ff5c3c6a.json","sourceId":"uc:UC-AI-12","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-9-3-49fe9ffd.json","targetId":"ctrl:iso-42001:A.9.3","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:2a624909b80cf0180b61f0903fa2a0e878b9b569af172a20692c6f818f61cf81","properties":{"control_id":"A007","coverage":"partial","delta":"output-level safeguards against copyright, trademark, and other third-party intellectual-property infringement by generated content","framework":"aiuc-1","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"July 15, 2026 release (quarterly update cadence)"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-12-ff5c3c6a.json","sourceId":"uc:UC-AI-12","targetDetailPath":"/data/v1/records/ctrl-aiuc-1-a007-c9925452.json","targetId":"ctrl:aiuc-1:A007","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:39c6d2f1e557c01b1dc787fced10a7b0a28ce06b4907261d626691260deb0cd0","properties":{"rationale":"Acceptable-use policy and use screening prohibit offensive-cyber and weapons-uplift uses, complementing the technical refusal control.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-12-ff5c3c6a.json","sourceId":"uc:UC-AI-12","targetDetailPath":"/data/v1/records/risk-ai-catastrophic-cyber-misuse-6bced10d.json","targetId":"risk:ai-catastrophic-cyber-misuse","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:3cada5df34044a524d37beb74060673420c4d6942601892c8f0176bffdd68840","properties":{"control_id":"A.9.2","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-12-ff5c3c6a.json","sourceId":"uc:UC-AI-12","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-9-2-2550f9b7.json","targetId":"ctrl:iso-42001:A.9.2","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:434260ce5a865bac960474f39a2eb8bfcbd9fd7d6f15b2be7bcab29badaeb3a4","properties":{},"sourceDetailPath":"/data/v1/records/wf-d59-b3ddf606.json","sourceId":"wf:D59","targetDetailPath":"/data/v1/records/uc-uc-ai-12-ff5c3c6a.json","targetId":"uc:UC-AI-12","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:818c197688e1564e84a266985d8b0480de2d30044c5ec5561e64de0e907b2e8f","properties":{"rationale":"Enforcing use only in accordance with intended purpose limits misapplication of AI to unsuitable tasks.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-12-ff5c3c6a.json","sourceId":"uc:UC-AI-12","targetDetailPath":"/data/v1/records/risk-ai-inappropriate-task-allocation-72a18be5.json","targetId":"risk:ai-inappropriate-task-allocation","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:85465095a57ff528ced9e4c3c805f19a185af4fef6c62c16dfcb6d3a85cab4ae","properties":{"rationale":"Prohibition screening blocks untargeted facial-image scraping and prohibited biometric categorization.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-12-ff5c3c6a.json","sourceId":"uc:UC-AI-12","targetDetailPath":"/data/v1/records/risk-ai-highrisk-biometrics-c23b524a.json","targetId":"risk:ai-highrisk-biometrics","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:9c55dec1dbd4672cf87ec71fa139b1a8fcc3c5b3f88aff3b23ca693e54a8ab67","properties":{"control_id":"E010","coverage":"partial","delta":"establish and implement an end-user AI acceptable use policy, with violation detection and user notifications beyond intended-use and legal-prohibition screening","framework":"aiuc-1","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"July 15, 2026 release (quarterly update cadence)"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-12-ff5c3c6a.json","sourceId":"uc:UC-AI-12","targetDetailPath":"/data/v1/records/ctrl-aiuc-1-e010-250d0c25.json","targetId":"ctrl:aiuc-1:E010","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:bd701705e30b4b0636c1ca17fce719322730baccfc25e2fb9bdc8311346bee11","properties":{},"sourceDetailPath":"/data/v1/records/wf-g1-14bc355c.json","sourceId":"wf:G1","targetDetailPath":"/data/v1/records/uc-uc-ai-12-ff5c3c6a.json","targetId":"uc:UC-AI-12","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:bec6106b16982e5eadb40b4541bc5b95f3a2e1c9a4b6fe1b66329fbf3f79d599","properties":{"rationale":"Blocking manipulative-technique uses reduces AI-driven electorate manipulation.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-12-ff5c3c6a.json","sourceId":"uc:UC-AI-12","targetDetailPath":"/data/v1/records/risk-ai-highrisk-justice-democracy-7f7e4bfd.json","targetId":"risk:ai-highrisk-justice-democracy","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:dcd0327471e100028d6130af9f055e27797fadec49a4b7a4ba01dfa13b72a90c","properties":{"rationale":"Restricting systems to their intended use reduces misuse-driven harm.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-12-ff5c3c6a.json","sourceId":"uc:UC-AI-12","targetDetailPath":"/data/v1/records/risk-ai-safety-harm-to-people-d02cb500.json","targetId":"risk:ai-safety-harm-to-people","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:dec9e4544508e42974f878b50a5c83aaf867ab79b9c9a0ff23c77b5856f93c07","properties":{"control_id":"A.9.4","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-12-ff5c3c6a.json","sourceId":"uc:UC-AI-12","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-9-4-8a78e94e.json","targetId":"ctrl:iso-42001:A.9.4","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:e3c3e285f587d06017c59bf3832447a43bf074871edb8e0b06286f5314ad1b36","properties":{"rationale":"Screening uses against legal prohibitions and blocking/discontinuing them is the direct control preventing manipulative, social-scoring and scraping deployments.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-12-ff5c3c6a.json","sourceId":"uc:UC-AI-12","targetDetailPath":"/data/v1/records/risk-ai-prohibited-practices-daf993e5.json","targetId":"risk:ai-prohibited-practices","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:e7f129430b359a5200efbb80dffa5ac1539c2def1393ff9d390853900ca03494","properties":{},"sourceDetailPath":"/data/v1/records/wf-c65-09b9172f.json","sourceId":"wf:C65","targetDetailPath":"/data/v1/records/uc-uc-ai-12-ff5c3c6a.json","targetId":"uc:UC-AI-12","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ffa4f8a8ead0dcad2ac47848f3780e11b2f2fb008cc830db6d81c13e79587b42","properties":{"control_id":"AIA-Art5","coverage":"full","delta":null,"framework":"eu-ai-act","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Regulation (EU) 2024/1689"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-12-ff5c3c6a.json","sourceId":"uc:UC-AI-12","targetDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art5-53ad83df.json","targetId":"ctrl:eu-ai-act:AIA-Art5","type":"maps_to"}],"schemaVersion":1}