#Digitalisation in Compliance

Digital technologies – artificial intelligence (AI), the Internet of Things (IoT), and big data – are reshaping both our daily lives and the compliance culture within companies. Organisations are facing new types of risks, while new regulations are being adopted and rolled out. Just this year, the EU Data Act, the Digital Operational Resilience Act (DORA), and the NIS2 Directive have all broadened the European cybersecurity landscape, introducing stringent cybersecurity requirements for sectors dealing with data.

The use of AI tools requires companies to swiftly adapt and ensure the secure use and processing of data. These tools are user-friendly and easily accessible, providing professionals with a quick way to produce content and materials.

For compliance professionals, this means adapting to a dual challenge: integrating new technologies while also staying ahead of legal obligations. AI systems, for example, are now used in a wide variety of compliance-related functions: from monitoring transactions to detect financial crime, to automating due diligence processes. While these systems bring efficiency, they also introduce new risks such as algorithmic bias, lack of transparency, and the potential misuse of sensitive data.

The collection and use of data in a systematic way has become a necessity for modern businesses. The pace of technological development has been so fast that many organisations struggle to keep up and the increased use of AI demands a strong data infrastructure. Companies need to ensure they are collecting, storing, and processing data lawfully and securely. AI systems are only as good as the data they are trained on – and if that data is incomplet or poorly secured, the consequences can be severe. This places a new level of importance on data governance and cybersecurity as cornerstones of any compliance strategy.

At the same time, sustainability frameworks push us to rethink how we use our resources – including data storage. For instance, there has been some debate about the environmental footprint of each ChatGPT prompt and how that contributes to our overall digital carbon footprint.

In other words – digitalisation is not only about the  IT anymore, it’s central to how the organisations manage risks, build trust and ethical behaviour, and remain compliant in the data-driven competition.

#Open Digital Society – GDPR

GDPR – the General Data Protection Regulation – was, in many workplaces (especially smaller companies), considered the “unwanted baby.” It was often pushed to the bottom of the to-do list, and the knowledge of how to implement it effectively was limited. Over time, however, GDPR has proven to be a vital framework for managing and regulating data sharing in organizations.

It’s not always intuitive why certain data, even if publicly available online, cannot be used or stored within a company. Understanding this requires grasping the principles of lawful data processing.

In my daily life, GDPR becomes most visible when I browse the web. Almost every time I visit a site, I’m prompted to accept or decline cookies. While cookies help websites remember my preferences – something I generally appreciate – many also collect third-party data for advertising and behavioral tracking. I’ve started to rebel a bit by rejecting cookies, as I often struggle to see the real benefit of accepting them.

That said, I already give away a lot of data in other ways – for example, when shopping. My grocery store knows exactly what I usually buy each month, and my payment provider knows where I bought my last pair of socks.

#ChatGPT Providing Answers

ChatGPT seems to provide a lot of accurate answers, but when I search for scientific articles or ask specific questions, it sometimes becomes a bit too creative. It may generate information that sounds correct at first glance but turns out to be inaccurate upon closer inspection – for example, referencing non-existent articles or incorrect publication years.

While it’s improving at providing sources, it still requires users to fact-check. This is one of the most important aspects of adopting AI tools in companies. Humans tend to trust system-generated information – a phenomenon known as system bias. When something “looks” correct, we often don’t double-check. But verifying sources and critically evaluating the answers is crucial. Unfortunately, I suspect this final step is often skipped.

AI can be a great tool to boost productivity, support brainstorming, and improve written text, but it shouldn’t be blindly trusted. It’s a model based on probability – not absolute truth – meaning it gives ideas and suggestions, not verified facts. Still, it offers incredible speed and support in creating content. Just like people often face the same problems around the world, AI helps share solutions more efficiently.

When I first started using AI tools, I found that crafting good prompts required time and thought. Now, the tools have become so sophisticated that they can provide meaningful responses with much less context – or even brainstorm ideas with me!

#Self-Evaluation

The digital society and our relationship with data is something I reflect on daily. We share so much about ourselves – often without realizing it – and we need to become more aware of the digital footprints we leave behind.

Out of curiosity, I had already created a ProtonMail account before starting this course, but watching YouTube videos about data has made me even more aware of the future we are heading toward. Companies like Google hold immense power – perhaps more than any government. It’s only by demanding better standards from companies and governments that we can create real change.

In my professional life, I regularly consider the impact of data on how we work, communicate, and assess risks. I believe it’s important to closely follow how AI and regulatory changes will continue to shape the landscape – both to understand the opportunities and to be aware of the risks.

Even if I or the companies I work with don’t actively use these tools, someone else will. That alone makes it essential for me and those around me to understand the implications and consequences.

AI and big data have a lot to offer our society and are already transforming how we work. The pace of change is accelerating, and it’s fascinating to be part of this technological evolution. And as some of the other students also expressed it, it’s also vital!

I commented on Jaana Kristiina’s blogg post here: https://blogi.savonia.fi/jaanakristiinahenriksson/digi-society/ and Edri’s blogg post here: https://blogi.savonia.fi/edris/digi-society/