AI Incident Reporting

72 Hours. That is all you have.

#Defining an "Incident"

In the world of AI, an incident isn't just a server crash. It's:

* A biased output that caused discrimination. * A "hallucination" that gave dangerous medical or legal advice. * A privacy breach where the model leaked training data.

#The Notification Chain

Do you know who to call? In Spain, it's the AEPD and potentially the AESIA. You must report:

• 1
  What happened.
• 2
  Why it happened (Root Cause).
• 3
  How many people were affected.
• 4
  What you are doing to fix it.

#Preparation

Have a "Fire Drill" plan. Draft your notification templates NOW, not when the building is burning.