AI introduces novel data and IP risks that existing: Why is updating these existing policies, rather than only

AI creates new data and IP risks, so existing policies must be reviewed and updated rather than replaced or ignored.

The question

Preparing for AIGP? Take the free 5-min readiness quiz →

1. Existing policies are legally void once AI is introduced and must be fully replaced with new AI-specific documents

   Plausible but wrong: adopting AI does not void prior policies; they are revised, not discarded wholesale.
2. Regulators require deleting prior privacy and security policies before any AI governance program is adopted

   Plausible but wrong: no such deletion requirement exists; existing controls remain and are extended for AI.
3. AI introduces novel data and IP risks that existing policies may not cover, so they must be revised for AI use ✓

   Correct: the objective is to evaluate and update existing policies so they address AI-specific risks.
4. New AI policies alone suffice, so existing privacy and security documents need no review or modification now

   Plausible but wrong: AI intersects existing privacy, security, and IP domains, which must be updated, not ignored.

How to remember it

AI creates new data and IP risks, so existing policies must be reviewed and updated rather than replaced or ignored.

More Understanding the Foundations of AI Governance questions

• Use case assessment: Which life-cycle stage does this control primarily govern? →
• Impose contractual terms on data use: Which action most effectively addresses these constraints? →
• A generative, general-purpose model, since it produces new: Which characterization is most precise? →
• All 337 Understanding the Foundations of AI Governance questions →