When something goes wrong

Mistakes happen. What matters is speed. Tell your manager or the person named in your AI rules straight away if:

• you put personal or confidential information into a tool that was not approved for it
• AI output with an error reached a customer or a record
• a tool behaves unexpectedly, for example showing someone else's data

Do not try to hide it or fix it alone. If personal information is involved, your employer must assess the incident and, where it creates a real risk of significant harm, report it to the Privacy Commissioner of Canada (in Québec, the Commission d'accès à l'information) and notify the people affected as soon as feasible. Every breach must also be recorded. Keep what you can: the prompt, the output, the time and the tool.