PEC Tool: Redefining Privacy Risk Assessment for AI

How can businesses and risk managers navigate the complex challenges of privacy risks in today’s AI-driven world? In this new TANGO KERs series video, Dr. Sakshyam Panda, Lecturer in Cyber Security at the University of Greenwich, introduced the Privacy Enhancing Component (PEC) Tool – an innovative, research-driven solution designed to support advanced privacy risk assessments.

The PEC Tool helps organisations determine the need for Data Protection Impact Assessments as mandated by the GDPR and the EU AI Act. Through an integrated methodology, PEC identifies data flows, potential threats to personal and sensitive data, and privacy risks arising from both general data processes and AI applications. The tool not only quantifies risks and associated harms but also recommends tailored safeguards and countermeasures, enabling organisations to strengthen compliance while protecting individuals’ rights.