The National Institute of Standards and Technology’s AI Risk Management Framework 1.0, released in January 2023 with updates in 2024, provides voluntary guidance for managing AI risks throughout the AI lifecycle. The framework is organized around four core functions: Govern (establishing AI risk management culture and processes), Map (understanding context and identifying risks), Measure (analyzing and assessing risks), and Manage (prioritizing and responding to risks). It emphasizes trustworthy AI characteristics including validity, reliability, safety, security, resilience, accountability, transparency, explainability, privacy enhancement, and fairness. The framework addresses privacy risks in AI systems, including data minimization, purpose limitation, and consent management. It provides practical tools for organizations to identify, assess, and mitigate AI-related privacy risks while promoting responsible AI development aligned with organizational values and legal requirements.
Health Data Management Policy (under Ayushman Bharat Digital Mission)
ABDM participants must comply with the Health Data Management Policy. Healthcare laws include the Clinical Establishments Act, National Medical Commission Act provisions requiring physician confidentiality,