The Centre for the Governance of AI, Inc. (“GovAI US”) and its subsidiary, the Centre for the Governance of AI (“GovAI UK”) have cooperatively adopted this Privacy Notice.
This Privacy Notice describes how GovAI US, GovAI UK, and our affiliated organisations (collectively, “GovAI”, “we,” “us,” or “our”) collect, use, and share your personal information when you:
It also provides additional details regarding how we process the personal information of individuals in the United Kingdom (“UK”), including a description of rights you may have over your personal information under applicable UK law.
GovAI may have other unique privacy notices that apply to specific situations. To the extent you were provided with different privacy notices that are applicable, those notices will govern our interactions with you, not this one.
If you provide us with personal information of anyone other than yourself (such as a friend or family member), please note that you are responsible for complying with all applicable privacy and data protection laws prior to providing that information to GovAI (including obtaining consent, if required).
If you have any questions, please contact us using the details in the “Who we are and how you can get in touch” section below.
When we refer to “personal information,” we mean information that can be used to identify a person or can be linked directly to an individual. We may collect and process your personal information:
Unless we specifically request it, we ask that you not provide us with any sensitive personal information (e.g., information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, criminal background, or trade union membership).
We may collect information from the device(s) you use to access the Websites such as your Internet Protocol (IP) address; device type; dates and times you visit and use the Websites; activity on the Websites and referring websites or applications; Uniform Resource Locators, or URLs (i.e., website addresses) visited prior to arriving and after leaving our Websites; and approximate geolocation. We typically collect this information through the use of cookies and similar technologies. For more information on how we use cookies, please see our Cookie Policy.
We may use Google Analytics and other third-party services to improve the performance of the Websites and for analytics and marketing purposes. To learn more about how Google Analytics collects and processes data when using our Site, you may visit www.google.com/policies/privacy/partners. To opt out of Google Analytics you may visit https://tools.google.com/dlpage/gaoptout/
When you sign up for our newsletters, we may track when you open emails and click links in our email campaigns. We will not be able to provide you with our newsletter service if you do not provide us with this information.
We may collect your personal information from third parties, including the following:
We work closely with organisations and industry experts in identifying promising individuals and opportunities. Those opportunities may include jobs, grants, volunteer roles, scholarships, conferences and fellowships related to AI governance. Those organisations and industry experts may pass on data to us about individuals they interact with such as job applicants, employees, or volunteers so that we can assess them as potential recipients of our services, provide services to them, or consider them for a role.
We may also ask trusted informal advisors in their relevant areas to get advice, such as informal references in recruiting.
We may collect personal information about you from publicly available sources, including social media sites (e.g., LinkedIn) or news articles. Such information may include (as relevant) your education, employment history, and credentials.
We may do this, for example, when you apply for a role within our organisation, as part of our talent development programs, or when conducting donor due diligence.
When you apply for a role within our organisation (including to be a director), we may ask you to provide us with details of individuals who can provide a reference on your behalf. If you do so, we will obtain personal data about you from these referees as part of the application process.
We may use your personal information for the following purposes:
GovAI UK is a subsidiary entity of GovAI US. As such, your personal information may be shared amongst these two entities and our other affiliated organisations.
We may share your personal information with third parties as follows:
We may at times ask trusted members of our wider affiliate network to assist in our evaluation of candidates for our programs, events, collaborations, and services. In these instances, our affiliates contract or volunteer their time to support GovAI’s work under non-disclosure agreements, and treat the information shared with the highest level of confidentiality.
We work closely with organisations and industry experts in identifying promising individuals and opportunities. Those opportunities may include jobs, grants, volunteer roles, scholarships, conferences and fellowships related to AI governance.
If you apply for a role at GovAI and your application is not successful, we may share your contact details and relevant information with a contact at another organisation or with an industry expert to suggest you for an opportunity you might be a good fit for. We will only do this with your explicit consent.
We err on the side of caution and avoid sharing sensitive or unnecessary information. We may alternatively contact you to suggest you apply for the opportunity. We will only ever share your information with trusted organisations and individuals, and will ask them to respect the security of your information. We will ask them only to let you know about opportunities for which you are specifically well suited and to not add you to any mass mailing lists. We will never receive payment for sharing your information.
In exceptional circumstances, we reserve the right to pass on your personal information when there is a legal or “duty of care” imperative (for example if we need to safeguard other individuals).
We may share your personal information with our affiliate companies and organisations for the purposes set out in this notice.
We may also share your personal information with third-party service providers, who will process it on our behalf for the purposes identified above. We use third-party providers of certain services such as but not exclusively website hosting, website analytics, marketing services, IT maintenance, and identity checking.
Other than that, we may share your personal information:
We put in place organisational and technical measures to protect your personal information. These measures include taking all steps reasonably necessary to ensure our IT systems are secure and putting in place procedures to deal with suspected data breaches. In the unlikely event of a data breach, we will take steps to minimise the loss or destruction of data and, if required by law, will notify you. We have implemented data security policies and procedures, and relevant staff receive data security training.
Our security measures include:
Although we use reasonable security measures once we have received your personal data, the transmission of data over the internet (including by email) is never completely secure. We work to protect personal information, but we cannot guarantee the security of information transmitted to or by us.
The Websites contain links to other websites that are not owned or controlled by GovAI. We are not responsible for the privacy practices or the content of such other sites.
We will only keep your personal information for as long as we need it to achieve the purposes for which we collected it, to comply with our legal and regulatory obligations, to exercise our legal rights, and to protect ourselves from legal claims.
If we no longer need this personal information for the purposes set out in this notice, we will delete it or anonymise it so that nobody can identify you from the information.
We reserve the right to change this Privacy Notice from time to time. We will alert you when changes have been made by indicating the date this Privacy Notice was last updated or as otherwise may be required by law. It is recommended that you periodically revisit this Privacy Notice to learn of any changes.
GovAI US is a registered Section 501(c)(3) public charity in the United States (EIN 99-4000294). GovAI US’s registered office is at 131 Continental Dr, Suite 305, Newark, DE 19713.
GovAI UK operates through a company limited by guarantee, the registration number of which is 15883729. GovAI UK’s registered office is at Third Floor, 20 Old Bailey, London, United Kingdom, EC4M 7AN. If you have questions in relation to this Privacy Notice or on how we use your personal information, please contact us at: contact@governance.ai.
The UK General Data Protection Regulation (“UK GDPR”) requires us to provide additional information about how we handle the personal information of individuals subject to those laws. If you are a UK resident, or are otherwise within the scope of the UK GDPR, the following sections apply to our processing of your personal information.
For the purposes of the UK GDPR, GovAI UK and GovAI US are “controllers” of your personal information as it is described in this Privacy Notice. This means we make decisions about how and why your information is used, and have a responsibility to make sure that your rights are protected when we do so.
We will process your personal information only where we have a legal basis for doing so, including:
When we refer to our “legitimate interests,” we mean:
For more information on how we use your personal information, please see the “How do we use your personal information?” section above.
Certain types of personal information may be considered “sensitive” under the UK GDPR, such as information about your race or ethnic origins, political opinions, sex life or sexual orientation, religious beliefs, and health information. We may collect Sensitive Information, in certain circumstances. For example, we may collect:
Criminal Offence Data (data relating to criminal convictions and offences) is also given extra protection under the UK GDPR. In some circumstances we may collect Criminal Convictions Data about you, for example during our director application process (as part of which we invite you to inform us about your background and any crimes of which you may have been convicted).
We will generally ask for your consent for this Sensitive Information and Criminal Convictions Data, but we may also rely on other legal bases to collect and use it, for example when we need to do so to protect your vital interests, to obtain legal advice, or because we are subject to a legal obligation.
Under the UK GDPR, you may have the right to ask us for a copy of your personal information; to correct, delete, or restrict (stop any active) use of your personal information; and in certain cases to obtain the personal information you provide to us in a “structured, machine readable format.” You can also object to the use of your personal information in some circumstances (in particular, when we don’t have to use the data to meet a contractual or other legal requirement, or when we are using the data to send you marketing emails).
Where you have given us your consent to use your personal information, you can take back that consent at any time. If you do, we will stop using your personal information immediately, unless we collected it for a different purpose (for example, the information is necessary to comply with a legal obligation). If you decide to take back your consent, this will not affect the lawfulness of our actions before you made that decision. This means that our use of your personal information before you took back your consent remains legal.
These rights may be limited, for example, if answering your request would reveal personal information about another person or if you ask us to delete information which we are required by law to keep or have important legitimate interests to keep.
You also have the right to complain to a data protection authority about how we process your personal information. In the UK, the supervisory authority is the Information Commissioner’s Office.
To exercise any of these rights, or to make a complaint to us, you can get in touch using the details set out in the “Who we are and how you can get in touch” section above.
GovAI has global initiatives, and is based in the United Kingdom and the United States. We generally store your personal information within the UK and the US. Sometimes we use service providers who access your personal data in other countries.
When we need to share your personal information with people or organisations outside the UK, including in the United States, it might be subject to data protection laws that offer less protection than under the UK GDPR. Where this is the case, we take steps to ensure your personal information is protected, including by entering into contracts that have been approved by the relevant authorities (such as “standard contractual clauses” or an “international data transfer agreement”). If you want to learn more about this, or to get a copy of the transfer mechanism that we use, please reach out using the details given in the “Who we are and how you can get in touch” section above.
