Privacy and AI in Practice: Asking Better Questions, Smarter Consent, and Stronger Compliance

Guest NotesHannah Ji-Otto advises on data privacy, technology transactions and the use of technology, including artificial intelligence (AI). Hannah is a partner at Quarls & Brady LLP. She also counsels clients on preparing for and responding to data breaches, network intrusions, ransomware attacks and email compromises. With a particular focus on emerging technologies and innovative business models, Hannah helps companies navigate the full breadth of information governance challenges, guiding them in creating and maintaining comprehensive privacy compliance programs. Her clients, ranging from startups to Fortune 500 companies and including both for-profit and nonprofit, come from industries such as: Manufacturing, Consumer products and e-commerce, Health care, Insurance, Fintech, Education, and Marketing and retail.Guest LinkedIn: Hannah Ji-OttoKey Takeaways1. “Ask the right questions” is a privacy and AI skill. Better legal strategy (and better AI outputs) starts with asking the right questions and designing effective prompts.2. AI requires professional judgment—and strong soft skills. Being able to evaluate whether AI is hallucinating or accurate, distill large volumes of information, and collaborate well with others is increasingly essential as AI “takes over the world.”3. Privacy compliance is an ongoing program, not a one-time policy. Tabletop exercises can help prevent incidents and reduce mitigation costs, and privacy policies should be improved every year to keep pace with changing laws across jurisdictions.4. Build for speed of change: invest in people and culture. Technology moves fast, but people who can use technology and adapt are the sustainable resource—so building a strong team and a good culture is central to long-term success.