AAISM guidance on privacy-preserving AI highlights anonymization as the most effective means of protecting personal data used in training. By irreversibly removing or masking identifiable attributes, anonymization ensures that training data cannot be linked back to individuals, thereby meeting key privacy obligations under laws such as GDPR. Erasing data after training may limit exposure but does not protect it during the training process. Ensuring data quality improves accuracy but does not mitigate privacy risk.
Hashing protects data integrity but does not guarantee anonymity, as hashes can sometimes be reversed or correlated. Therefore, anonymization is the recommended control for protecting personal data in AI training.
References:
AAISM Study Guide - AI Technologies and Controls (Privacy-Preserving Methods) ISACA AI Security Management - Data Anonymization Practices