Question

A financial services firm wants to fine-tune a gen AI assistant on its internal documents, which include a mix of public marketing material, confidential client records, and regulated PII. Before any data is used for training, the Chief Data Officer wants to ensure the firm avoids inadvertently exposing sensitive information through the model. Which governance step should be completed FIRST?

Accepted Answer

Classify and label all source data by sensitivity level so that regulated and confidential records can be excluded or handled with appropriate controls

Answer

Deploy the fine-tuned model to a small pilot group and monitor its outputs for leaked information

Answer

Increase the model's temperature setting to reduce the chance it reproduces training data verbatim

Answer

Publish an AI transparency notice informing users that the assistant was trained on internal documents