TrustArc + IAPP: The AI You Didn’t Build: From Black Box to Defensible Risk

Learn how to uncover hidden vendor AI and build an audit-ready, defensible risk model.

Most AI risk today isn’t homegrown, it’s embedded in the third-party software you already use. When privacy and risk teams can’t inspect the model, “high risk” isn’t a defensible answer.

A practical framework is needed for discovering AI hidden in vendor products, mapping it to data and business processes, and scoring risk in a way that holds up to leadership, auditors, or regulators. The outcome: separating inherent from residual risk, translating findings into procurement and contract terms, and building the evidence trail to answer, “How did you arrive at that number?”

Attendees will learn:

• How to identify AI embedded in third-party products, even when vendor documentation is incomplete
• A repeatable structure for scoring third-party AI risk using data sensitivity, purpose, autonomy, and consequence
• How to distinguish inherent risk from residual risk, without treating vendor assurances as mitigation by default
• How to translate a risk assessment into contract terms, monitoring obligations, and escalation triggers

This webinar is in collaboration with IAPP.

Webinar Speakers

Joanne Furtsch VP, Knowledge & Global DPO, TrustArc

Darren Abernethy Shareholder, Greenberg Traurig

Hilary Wandall Chief Ethics & Compliance Officer, Dun & Bradstreet