Science data – support for researchers

Science data – support for researchers

AI in Research

Like the EU’s General Data Protection Regulation (GDPR) in 2018, the EU Artificial Intelligence Act could become a global standard, regarding safeguards, limitations and rights on the use of Artificial Intelligence.. In February 2024, the European Parliament endorsed the provisional agreement on the AI Act that ensures safety and complies with fundamental rights. Read the press release here.

As AI is being increasingly used in research projects, this new regulation might have implications for you as a researcher.

UU is working on general policy on the use of AI, but it is unclear when that policy will be in place. Until then, the Faculty of Science applies the following guidelines.

  • The use of AI must meet the requirements of UU’s Security Control Framework, which states: “AI tools do not use production data, including user prompts, to (further) train the underlying AI models. This also prohibits the entry of data (including questions from which sensitive matters can be derived) with basic confidentiality or higher in tools where it is not explicit that this data may not be used. AI tools are only allowed if they assure the UU that all UU prompts and answers are not used to train the model. Models trained on UU training data may only be used within the context of the UU.” (Security measure IS.13.007)
  • Furthermore, the SCF states that sensitive data should only reside in organizationally managed environments. Before sensitive data leaves the organization, official relations including agreements with the receiving party about data storage and handling exist. (Security measure IS.8.009)
  • The use of AI must comply with existing laws and regulations such as the GDPR.

If you want to use AI in (research) projects, the urgent advice is:

  • Contact the faculty Data Steward Frans Huigen.
  • Have us help you out to:
    • Carry out a data classification so that it becomes clear whether the use of AI is justified.
    • If you are working with personal data, also perform a privacy scan.
    • Document the choices made in the project to ensure secure use of AI.
  • Take into account a future general policy of the UU, in which only a limited number of tools may be allowed, and/or further restrictions on the use may be applied.