GenAIGuidelinesForGovernmentENCompressed

Privacy and Security It is important to develop and use generative artificial intelligence tools in a safe manner, taking into account relevant regulatory requirements, including the regulatory requirements related to the protection of personal data subjects, the relevant cybersecurity standards issued by the National Cybersecurity Authority, and the Data Classification Policy. With the aim of preventing illegal access to data and the system, which may lead to damage to reputation or psychological, financial, or pro- fessional harm, generative artificial intelligence tools are designed using mechanisms and controls that enable managing and monitoring the results throughout the system’s life cycle. Users must: 1. Employees in government entities must refrain from entering any data classified as restricted or higher (restricted, confidential, and top secret). 2. Implement strict data protection measures in accordance with the provisions of the Personal Data Protection Law. 3. The use of generative artificial intelligence tools should be limited to data classified as “pub- lic” data. 4. You should check the privacy policies of these tools, including their disclosure and sharing terms. 5. The risks arising from the use of tools must be taken into account, including data leakage, misinformation, deepfake, bias, and decisions affecting the safety of individuals. It is crucial not to enter any data or information that is not properly classified. Assessing the risks involves es- timating and addressing the potential risks resulting from the development or use of generative artificial intelligence tools. Subsequently, the risk levels in the tools are classified at any of the following levels in accordance with the AI Ethics Principles issued by SDAIA. 6. The risks resulting from the use of generative artificial intelligence tools must be assessed in accordance with the AI Ethics Principles: Generative Artificial Intelligence Guidelines For Government 1. Little or no risks: There are no restrictions on AI systems that pose little or no risk, such as spam filters but, it is recommended that these systems be ethically compliant. 2. Limited risks: AI systems that pose limited risks, such as technical programs related to function, development, and performance, are subject to the application of the AI Ethics principles mentioned in this document. 3. High risk: AI systems that pose “high risks” to basic rights must undergo pre- and post-conform- ity assessments, and in addition to adhering to ethics, the relevant statuary requirements must be considered. 4. Unacceptable risks: AI systems that pose an ‘unacceptable risk’ to people’s safety, livelihoods, and rights, such as those related to social profiling, exploitation of children, or distorted behavior, that are likely to occur are not allowed. 3.6 Humanity It is essential to build and use GenAI tools according to a fair and ethical methodology grounded in human rights and fundamental cultural values. This approach aims to create a positive impact on the involved par- ties and local communities, contributing to the realization of both short and long-term goals for the benefit and prosperity of humanity. It is necessary to design and use GenAI tools in a manner that avoids deception, manipulation, or the establishment of behavior contrary to the empowerment, enhancement, or augmentation of human skills. Instead, the design and use approach should be centered on providing choices and deci- sion-making capabilities for the benefit of humanity.