AI Privacy Checker

1. Do you have a lawful basis for processing personal data via AI? GDPR Article 6 requirement.

2. Are individuals informed AI is being used? Transparency requirement.

3. Are profiling / automated-decision rights respected (GDPR 22)? High-stakes decisions need human review.

4. Do you have a data subject access request (DSAR) plan that covers AI? Users can ask what AI knows about them.

5. Is AI included in your privacy policy? People need to know.

6. Is there a data retention policy for AI inputs? GDPR storage limitation.

7. Have you done a DPIA if the use is high-risk? Data Protection Impact Assessment — required for high-risk uses.

8. Can individuals opt-out of AI processing where required? CCPA / some-state laws.

9. Are third-country transfers covered by SCCs or equivalent? If vendor is non-EU.

10. Do you train models on user data only with explicit consent? Opt-in, never opt-out for training.