Latest / The Road to Accountable AI / Reid Blackman: Aligning AI with Ethics in the Real World
Transcript
- 0:01Reed, welcome to The Road to Accountable AI.
- 0:05Thanks for having me.
- 0:07Tell me a little bit about how you got into this field of AI ethics, because
- 0:12relatively speaking, you've been doing it for quite some time.
- 0:15That's good.
- 0:16Relatively speaking, I've been doing it forever.
- 0:19Yeah, I mean, there's sort of a grander story, I suppose, but to sort of keep it
- 0:22brief, I was a philosophy professor specializing in ethics.
- 0:26I had the idea for an ethics consulting company many, many years ago.
- 0:30I didn't see any kind of market for it.
- 0:33Fast forward, I heard some things.
- 0:35I thought, okay, maybe there's a market for this actually.
- 0:37And so I left academia and I started an ethics consulting company.
- 0:40with the intention of making it focus on emerging technologies and perhaps AI in
- 0:45particular.
- 0:46I didn't know how quickly the AI space would grow.
- 0:49Thankfully, it grew quite quickly.
- 0:51And so I started advising and consulting on how to do AI responsibly, ethically, at
- 0:58least not negligently.
- 1:00That's the goal here.
- 1:02What does the academic training philosophy bring you in this kind of applied field?
- 1:07Well, before people called it responsible AI, they called it AI ethics.
- 1:10We're talking about the ethical implications of AI, ethical, reputational,
- 1:13regulatory, and legal risks.
- 1:15If you want to know something about AI ethics, you better know something about
- 1:18AI, and you better know something about ethics.
- 1:20And I know a bunch about ethics.
- 1:21That's what the PhD and the 10 years of being a professor and the whatever it was,
- 1:2515 plus years of academic research and publishing do.
- 1:28So when people make certain kinds of claims about responsible AI or AI ethics,
- 1:33frankly, a lot of times they just don't have a good grip on the ethics of things.
- 1:37And so they say things that are false, misleading will lead them down wrong
- 1:40paths.
- 1:41And so having that kind of experience, understanding, frankly, expertise under my
- 1:45belt means that I can navigate the conversation really well.
- 1:48I'll give you one quick story to sort of put some meat on the bones of that.
- 1:52When I very, when I was really just early transitioning from academic life to my own
- 1:57company, I joined IEEE, that's the standardizing organization for engineers.
- 2:03because they were working on this project called Ethically Aligned Design.
- 2:06And it was about how do we align, what do they call it?
- 2:09Autonomous and intelligent systems with our human values or something along those
- 2:13lines.
- 2:14And I got myself onto this committee that was in charge of figuring out what are the
- 2:18guidelines or what's the advice around research and design of AI from an ethics
- 2:23perspective.
- 2:23And I got on the first call and I was anticipating not being able to say
- 2:28anything because I thought these are a bunch of engineers.
- 2:30They, I don't know.
- 2:31I don't really know anything about AI.
- 2:32I'm not an engineer.
- 2:33I'm not a computer scientist.
- 2:34I'm not a mathematician.
- 2:35I'm an ethicist.
- 2:36So I expected it to be a sort of meeting in which I just sat back and listened to
- 2:41the experts.
- 2:42What I learned within the first few minutes is, oh, this isn't some advanced
- 2:49engineering discussion.
- 2:50This is first semester, first year students talking about ethics.
- 2:55They don't know anything.
- 2:56They're engineers.
- 2:57And...
- 2:58What wound up happening to my sort of amazement is I wound up essentially
- 3:01leading the entire conversation, just leading because they were just saying
- 3:06things that, you know, my first year, first semester undergraduates used to say
- 3:10about ethics and they were just fundamentally confused.
- 3:12And so I went in there and I sort of led the conversation and had to clear up a
- 3:16number of confusions, answer a bunch of questions, direct the discussion in way
- 3:20that would actually be fruitful.
- 3:22And so it turns out that it's really the ethics expertise that's more useful than
- 3:26the AI expertise in a lot of these conversations.
- 3:28Well, you know, not necessarily from that specific example, but what are some
- 3:32misunderstandings that people tend to have if they don't have some real background?
- 3:36Well, one would explain, I think, the transition from talking about AI ethics as
- 3:40was the standard to talking about responsible AI as has become the standard
- 3:43among corporations.
- 3:44They just don't know what the heck to do with ethics.
- 3:47The number one misconception, which I opened my book, Ethical Machines, with
- 3:51this is they just think it's squishy, it's subjective, it's just a matter of opinion,
- 3:54it's how you feel about stuff.
- 3:56And if you think of ethics as just how you feel about stuff, you know, I like
- 4:01chocolate, you prefer vanilla.
- 4:03I like genocide, you prefer peace.
- 4:05If we think of it along those ways, then of course you're not going to get your way
- 4:10to actionable steps to identifying and mitigating the risks.
- 4:13So unless you think about ethics as something that's more just touchy -feely
- 4:17stuff, you're not going to actually get your way to designing a framework,
- 4:22designing policy, designing procedures, designing metrics, designing training.
- 4:28Otherwise you just tell everyone to consult how they feel about stuff.
- 4:31That's not, that's silly.
- 4:33And so,
- 4:34Getting rid of that misconception, articulating that ethics is or at least
- 4:38can be conceived of as being perfectly objective, and that there are ways of
- 4:42doing ethical inquiry that are responsible versus irresponsible, that there are ways
- 4:47of articulating it in concrete ways that lead to action, that's a phenomenally
- 4:51useful perspective that most people simply don't have.
- 4:55Let me just play devil's advocate a little bit more, though.
- 4:58People talk about responsible AI, but nowadays people also talk about things
- 5:01like AI governance or AI risk management or AI safety, which are all terms that
- 5:06don't necessarily have that kind of ethical loading.
- 5:10Do you think that's misguided?
- 5:12Should we still be talking about ethics or are these different things?
- 5:16So I've argued, this is a point I make in my book, that we shouldn't use the term
- 5:20responsible AI, that the term responsible AI is a term that was invented by
- 5:24corporates essentially, so they don't have to say the word ethics because they don't
- 5:27want to deal with it.
- 5:28Incidentally, this is in line with some advice that I got early on when I was
- 5:33still a professor.
- 5:34I was talking to an executive at Starbucks and she said, not unreasonably, you might
- 5:40not want to say that you're doing ethics consulting.
- 5:41People don't like the word ethics.
- 5:43They don't get it.
- 5:45And I said, no, no, I'm just going to own the word ethics then.
- 5:47If that's the answer, I'm just going to own the word ethics.
- 5:50And I changed it incidentally to ethical risk because I thought risk was a language
- 5:53that businesses understand.
- 5:55Now, look, there's no principled reason to oppose the term responsible AI.
- 6:02It's not as though that's completely bonkers from a ethical or a conceptual
- 6:07perspective.
- 6:07That's reasonable.
- 6:08I think though, this has been my experience that...
- 6:12What happens when people use the term responsible AI in practice is that they
- 6:16throw in ethics -y stuff into the responsible AI bucket, but then they throw
- 6:20a bunch of other stuff in as well.
- 6:21So they'll say, yes, responsible AI is ethics and safety and regulatory
- 6:25compliance and engineering excellence and cybersecurity.
- 6:29It's just all the stuff.
- 6:31And then what happens is they say, okay, now let's address the responsible AI
- 6:35bucket.
- 6:36And then the experts in the room are experts on things like...
- 6:40engineering excellence and cyber security and regulatory compliance.
- 6:43And so what do they do?
- 6:45They prioritize all of those things to the exclusion of talking about the ethics
- 6:51stuff.
- 6:51And so I think that they miss out on huge swaths of risk because they've decided
- 6:55let's just, you know, we're focused on responsibility now and these things within
- 6:58those buckets.
- 6:59And so I think again, while in principle there's nothing wrong with it,
- 7:03pragmatically or in practice, what happens is that ethical risks get pushed to the
- 7:07sidelines.
- 7:09Yeah, it's fascinating.
- 7:10I mean, I'm a professor of legal studies and business ethics, and we have for a
- 7:14long time had a lot of the same conversations more broadly in terms of,
- 7:18you know, what does it mean?
- 7:19How should we talk about it?
- 7:21You know, what's more effective practically in terms of getting businesses
- 7:24to change their behaviors?
- 7:25Do you think these conversations that we're having about AI are really just a
- 7:30microcosm of the larger issues for business?
- 7:32Or are there some things about AI that are really distinctive in these discussions?
- 7:38Probably a little bit of both.
- 7:40You know, I think that...
- 7:43Sorry, just a quick...
- 7:44I'm getting some feedback.
- 7:45I can hear myself a little bit.
- 7:46Is it coming out of your speaker and back into your microphone?
- 7:50I could put my earbuds in.
- 7:58Yeah, I'm not hearing anything, but.
- 8:00Yeah, it's probably on my hand.
- 8:03OK.
- 8:05It's coming out of me.
- 8:07Yes, it might be.
- 8:08Let me just.
- 8:14this connects up with the headphones.
- 8:16But yeah.
- 8:27Can you say something?
- 8:29Sorry.
- 8:30Okay, yeah, now I'm hearing you in the earbuds.
- 8:32Okay.
- 8:32Okay.
- 8:34Let's let's try that.
- 8:36So now, now I can hear you in the earbuds.
- 8:37Hopefully that'll.
- 8:38All right.
- 8:39I can't even see your earbuds.
- 8:41That's good.
- 8:41I guess I can see them barely, but if I'm, if I'm really looking.
- 8:44So, okay.
- 8:45So let's say you asked the question and obviously this look at edit out, you asked
- 8:48the question, is this sort of microcosm for ethics and business or is there
- 8:52something special about AI?
- 8:53Yep.
- 8:54Um, so it's a little bit of both.
- 8:58I think that one reason why the ethical risks of AI are much discussed is because
- 9:04it's of the nature of the beast that is AI.
- 9:07machine learning that certain kinds of risks are quite likely to be realized
- 9:11despite the best intentions in some cases of the people designing the AI.
- 9:16So we get things like biased AI and black box AI, we get privacy violations and
- 9:21those kinds of ethical breaches are not usually the result of bad actors, of bad
- 9:25apples.
- 9:26And so since we've got this powerful new tool, people want to use it for innovation
- 9:31to drive revenue, to drive internal efficiency, et cetera.
- 9:34But it comes with these associated risks.
- 9:36We naturally get this kind of conversation around risks.
- 9:41I also think that there's probably some contingent story to be told about why
- 9:45people are paying particular attention to this technology in ways that people don't
- 9:50pay attention to ethical breaches by corporations more generally in a way.
- 9:54So perhaps there's some story to be told about how the people in the technological
- 10:00space, they tend to be younger, they tend to be more activist -y.
- 10:04And so you get the overlapping diagram of being a technologist and being sort of
- 10:10activist -y, social media active, social justice warrior.
- 10:13And since you get that overlap of the diagram, you get as a matter of sort of
- 10:17historical contingent fact, lots of attention on the ethical impacts of AI.
- 10:22Yeah, it's interesting.
- 10:23And obviously we've seen a lot of evolution in terms of adoption of AI and
- 10:27awareness of AI in the last several years.
- 10:30Have the kinds of questions that companies ask you or the things that they bring you
- 10:34in for changed?
- 10:37I wouldn't say that they've changed radically.
- 10:38I think that the frequency with which the conversations are had, the frequency with
- 10:42which people want help with this sort of thing has increased over the years.
- 10:46There are certain kinds of risks that have popped up very high on the radar as of
- 10:50late, specifically since ChatGPT came out.
- 10:53Very much increased concerns around cybersecurity or the security integrity of
- 10:58their data.
- 10:59That's been a major issue, of course.
- 11:00And then, of course, the hallucination issue that ChatGPT or other models will
- 11:05output just false.
- 11:06false statements.
- 11:08So I think, you know, if I said, you know, what are the big risks that have come out
- 11:10lately?
- 11:11It'd be the cyber risks and the hallucination risks.
- 11:14The bias risks that are associated with generative AI, those have been around
- 11:18since we've been talking about AI ethics at all.
- 11:20So that's not really new, but it's perhaps exacerbated or, or especially now that it
- 11:24comes in visual form, it's captured the imagination of people a bit more, but
- 11:30nothing has fundamentally changed.
- 11:32I don't think it's just awareness has grown.
- 11:34It's just that awareness has grown.
- 11:38So in terms of generative AI, you mentioned the hallucination potential.
- 11:41How should we think about that from an ethics standpoint?
- 11:48You're on mute now, it looks like.
- 11:52Sorry, I muted myself by accident.
- 11:53Not about.
- 11:56The hallucination problem is not tremendously, no, I was thinking something
- 12:00else.
- 12:03The hallucination problem is a problem both for the technologists and for
- 12:08ethicists.
- 12:09So, one, everyone wants accurate AI.
- 12:11Nobody wants things that are said that are false.
- 12:14That makes it useless.
- 12:16So, one, there's just a sort straight -up technical problem.
- 12:18It only veers into the lane of the ethicist when it's giving outputs that are
- 12:23ethically significant or can have an impact on, say, the livelihood of people.
- 12:27So, if it's hallucinating about where you should put your money, let's say it's
- 12:31acting as a financial advisor,
- 12:33or it's hallucinating about what the appropriate diagnosis is, or it's
- 12:36hallucinating about whether you can combine these two kinds of drugs when
- 12:39you're asking about your prescriptions or something along those lines, then the
- 12:43ethical impacts are serious.
- 12:44So there's a way in which, you know, I think about the ethics of hallucinations,
- 12:48I think I think this, as something akin to the ethics of bridge building.
- 12:52You know, when you build a bridge, you don't want the thing to fall apart,
- 12:56otherwise it would be a useless bridge.
- 12:58Of course, if it falls apart, if the technical aspects are all out of whack,
- 13:01then so too will the ethical impacts be out of whack, because then people will be
- 13:05on the bridge and it'll collapse and they'll die.
- 13:06So that's really ethically bad.
- 13:07But it's really fine.
- 13:09It's not, if you like an ethical problem as such to solve, it's more like there's
- 13:14these quasi -technical problems like outputting false information that has or
- 13:20can have serious ethical impacts.
- 13:23But there are these questions with generative AI about what's the appropriate
- 13:27response, what might be toxic or improper, culturally insensitive, or biased in ways
- 13:34where reasonable minds can differ.
- 13:36So if a company brings you in to figure those things out, how would you advise
- 13:42them?
- 13:43So there's a couple of things to say here.
- 13:44I mean, the first thing to say is that usually my company, myself, my company is
- 13:50not brought in at that really granular level of we've got this particular model
- 13:55for this particular use case.
- 13:56And we want to know what are the standards that should govern this particular model
- 14:00that happens.
- 14:00Sometimes it's starting to come up a little bit more precisely because of
- 14:04particular applications of LLMs for exactly the reasons that you've just
- 14:07stated.
- 14:08Usually what they're looking for is how do we even, how do we get our organizational
- 14:11hands around this?
- 14:13more generally.
- 14:14So how do we create policy around this kind of thing?
- 14:16How do we create the procedures and augment existing workflows for our say
- 14:21data scientists and product managers to look for these kinds of risks, to flag
- 14:24these kinds of things?
- 14:25How do we put together the appropriate risk board or committee so that there's
- 14:29someone to whom they can elevate those kinds of concerns?
- 14:31How do we create the grounds on which that committee is going to make decisions about
- 14:36what the appropriate benchmarks are for sufficiently safe or sufficiently
- 14:40appropriate?
- 14:40Something along those lines.
- 14:43As for how those substantive decisions get made, there's roughly two kinds of things,
- 14:48two kinds of tools that I like to reference.
- 14:50One is an ethics statement or an AI ethics statement.
- 14:53Some people are going to call them responsible AI statements.
- 14:56Those are really, if you like, high level articulations of values connected to
- 14:59guardrails of action.
- 15:00So because we value privacy, we'll never do X.
- 15:03We'll never sell your data to a third party.
- 15:05Because we value accountability, we will integrate people's
- 15:12compliance with our AI ethics program into their performance reviews.
- 15:15We'll put ownership of the AI ethics program in the hands of a C -suite
- 15:20executive, that sort of thing.
- 15:22So there's those high level policies that are, I'll give you one more, because we
- 15:27value justice or fairness, we will vet our AI models for bias at each and every stage
- 15:33of the AI life cycle.
- 15:34So these are sort of commitments of action tied to values that get at least some
- 15:39procedural guardrails in place.
- 15:41and some, some substantive actions that are ruled out after that.
- 15:45I mean, even getting that as a big deal and implementing those procedures, that's
- 15:49a big deal.
- 15:49So forget about, you know, as an act, as at least as a former academic and you, you
- 15:55know, you want to deal with those really tough cases.
- 15:56Let's deal with these really tough cases where there's a lot of gray area.
- 16:01How do we decide what's appropriate for this LM?
- 16:03But the truth is, and I would love for my, for most of my customers and my clients to
- 16:08be like, yeah, let's help us with these.
- 16:09really hard, tough gray area cases.
- 16:12But that's, that's not where their heads are.
- 16:14Their heads are, can we just, that's running.
- 16:17Gray area cases is running.
- 16:18We're just learning how to walk here.
- 16:20We're barely crawling at the moment.
- 16:22How can we crawl safely without like falling off the table?
- 16:25And so, sorry, I'm going on a bit of a ramble.
- 16:29So one is there are those kinds of conversations about really concrete models
- 16:34and what constitutes appropriate.
- 16:35One thing to do is to have general kinds of policies.
- 16:38The second thing to do is to have what I call ethical case law.
- 16:41So this is when you articulate certain kinds of cases that you would say this
- 16:45would be inappropriate.
- 16:46This would be not appropriate.
- 16:48Sort of get internal alignment on those being what I like to call the ethical
- 16:52nightmares.
- 16:53And then when you have a particular novel case, like should it be allowed to say X
- 16:57to Y, let's say something with a certain political content to a general audience,
- 17:04you can compare it to your ethical case law, internal ethical case law and see
- 17:07whether...
- 17:08that provides sufficient guidance.
- 17:09And then of course, there's going to be deliberation among the ethics board or the
- 17:11risk committee, whatever.
- 17:13The thing that I was backing up to say too soon, I sort of interrupted myself is the
- 17:17truth of the matter is while the hard cases are sexy and they're interesting,
- 17:21especially to academics, they are not where most companies are because most
- 17:25companies are dealing with the not crazy gray cases.
- 17:29You know, maybe an open AI is dealing with those gray cases, a Google, a Microsoft,
- 17:35but a financial services company.
- 17:37Insurance industry, health care and life sciences, food and beverage, apparel,
- 17:44retail, they're not dealing with those crazy situations.
- 17:48They're just hiring people, right?
- 17:50They're using AI software to hire people.
- 17:52How do we not do that in a discriminatory and biased way?
- 17:55So I don't know, this is my sort of, okay, I'm going to stop talking now, but this is
- 17:57my very long -winded way of saying most companies don't deal with those kinds of
- 18:02tough cases.
- 18:03Yeah, no, that was great.
- 18:04I there was a lot of real good meat in what you put out there.
- 18:08So let me just unpack some of it.
- 18:11If companies are just starting down this path, what's the most important thing for
- 18:16them to do first?
- 18:18I always like to say that sort of table stakes is a call it a risk assessment or a
- 18:22gap analysis or AI ethical risk maturity assessment.
- 18:26I think most organizations don't sort of know where they are and what they have in
- 18:30relation to what those risks may be.
- 18:32So looking to see what existing governance structures do we have that cover this sort
- 18:37of thing?
- 18:38What, what do we lack?
- 18:39What kinds of policies do we have that cover this thing?
- 18:41What policies do we lack in most cases?
- 18:44If a company has done literally nothing on the responsible AI front,
- 18:48then you might not even need to do that gap analysis risk assessment maturity
- 18:53assessment.
- 18:53You know, you've got nothing.
- 18:54And now you've got to start with an AI ethics statement, which is going to
- 18:59articulate what those standards are and the procedures that are associated with
- 19:02those standards.
- 19:03And frankly, if you can, the metrics that are associated with those procedures, I
- 19:07like to draw a really clear line from values of a business or sorry, AI ethical
- 19:12risk values to procedures and the metrics that are used.
- 19:17to track compliance and impact of those procedures.
- 19:22So that's a good first step.
- 19:26And then sort of part and partial that is then to start building a customized
- 19:29framework.
- 19:30When I say framework, I mean something somewhat specific.
- 19:33It's going to include policies, additional governance structures, governance bodies,
- 19:38like an ethics board, it's going to include metrics, might include procedures,
- 19:44might include race matrices, that sort of thing.
- 19:48Yeah, so it's one of things I really love about your book, Ethical Machines, that
- 19:51it's rooted in serious ethics, but it's very pragmatic in terms of these kinds of
- 19:56things that you're talking about.
- 19:57But how much do companies really differ?
- 20:01You're talking about customization, but I think there's probably no company would
- 20:04say, well, our values, we don't care about privacy, or our values, our discrimination
- 20:08is OK.
- 20:09So where is it really going to be customized?
- 20:12There's actually quite a bit of customization to be done.
- 20:13It's actually most of what we do is the customization bit.
- 20:17There are lots of things that vary.
- 20:20So for instance, you're correct.
- 20:22Two different organizations, a hundred organizations are going to say we value
- 20:25privacy.
- 20:26What that means is going to vary quite a bit across organizations.
- 20:30Some will say we'll never sell consumer data to a third party.
- 20:34That's part of what our commitment to privacy is.
- 20:36Other companies will say, no, no, no.
- 20:38We're going to sell that data.
- 20:39That's what we do.
- 20:40It's a major revenue source for us.
- 20:42So we respect people's privacy, which means we will always ensure that we're
- 20:46going to aggregate and anonymize that data and use various kinds of privacy
- 20:49preserving techniques like Q anonymity.
- 20:52But that's, um, K anonymity, but, uh, that's, uh, you know, that's very
- 20:59different from saying we're not going to sell the data at all.
- 21:01There are differences in what the governance structures have to look like.
- 21:04So look, some organizations are structured like partnerships.
- 21:08And some are, if you like the sort of the classic pyramid of CEO on top and then
- 21:13everyone below that.
- 21:15When you have an organization that has sort of like a CEO on top and the CEO
- 21:18says, this is how it goes.
- 21:21This is a gross oversimplification, but more or less, okay, if you've got the buy
- 21:25-in of the CEO, that's more or less how it's going to go.
- 21:27If on the other hand, you have say a giant consultancy spread across dozens of
- 21:31markets where there's not that kind of top down change.
- 21:37because each you need to get buy -in from each of the partnerships, each of the
- 21:41heads of each of the partnerships.
- 21:42Now governance looks totally different because there's not, if you like, one
- 21:45board to rule them all.
- 21:46They might say like, yeah, that's good for you guys in the US, but we're over here in
- 21:50the EU.
- 21:51And so we're going to do things, we're going have to do things a little bit
- 21:52differently over here.
- 21:53Our standards are going to be different here.
- 21:55Some people want to apply the same standards across all markets.
- 21:59So yes, we're in EMEA, we're in the EU, we're in the US, you know, North America,
- 22:03et cetera.
- 22:04And we're going have the same standards across the board.
- 22:06Others say, no, no, no, we're going to have different standards for different
- 22:09markets, different risk thresholds for different markets.
- 22:11We're going to roll this out in different ways.
- 22:14So we're going to roll it out by market, for instance.
- 22:16So first we're going to roll out this program in the U .S.
- 22:18Then we're going to expand to North America, and then we're going to expand to
- 22:22the U and then to EMEA, et cetera.
- 22:24Others say, no, no, we're not going to roll out by market.
- 22:27We're going to roll out by role.
- 22:28So first we're going to roll it out to all the data scientists.
- 22:30I don't care where geographically they happen to be.
- 22:33And then we're going to roll out to HR.
- 22:35And then we're going to roll it out to marketing.
- 22:36And so there's different ways of, well, that's going to be customized.
- 22:40Who's going to sit on the board?
- 22:42What kind of authority does the board have?
- 22:44Can the ethics board be overruled by a more senior executive?
- 22:47That's it.
- 22:48Some organizations can say, no, it can't be overruled.
- 22:51That's the final say.
- 22:52Other will say, yeah, it can be overruled by say the CEO or something along those
- 22:56lines or a chief data officer.
- 22:57Chief data officer is not actually on that board.
- 23:00So there's a tremendous amount of, what does training look like?
- 23:04What are risk?
- 23:04We already do risk matrices in our organization.
- 23:07And the way that we do risk assessments is different how our peers do risk
- 23:11assessments.
- 23:12We want responsible AI or AI ethical risk assessments that cohere with, that
- 23:16harmonize or integrate with how we already think about risk in our organization, how
- 23:19we already do those risk assessments.
- 23:21And same with metrics.
- 23:23We want metrics that mirror the kinds of risk metrics that we already have at the
- 23:28enterprise wide or department level, et cetera.
- 23:30So there's a tremendous amount of customization that needs to be done.
- 23:34That's why there's the NIST AI assurance or whatever it's called framework.
- 23:39And it's great.
- 23:40It's super smart.
- 23:42It's totally generic though, necessarily.
- 23:45And so you give that document to, here's a really smart, generic framework.
- 23:50And there is a tremendous amount of work left to be done.
- 23:55But are there right -
- 23:59of understanding what the organization is and customizing the AI ethics.
- 24:05So I think there's reasonable and unreasonable.
- 24:07And I think this is a place where we sort of can think about it in terms of the
- 24:10political spectrum.
- 24:11I think that there are companies who are sort of on the left side of the spectrum,
- 24:14take a Patagonia.
- 24:15There are companies on the right side of the spectrum, take a Hobby Lobby.
- 24:18And we sort of think, yeah, that's fine in the corporate world having that.
- 24:21I mean, most anywhere you think about it.
- 24:22Having that kind of diversity of values, that's acceptable to us.
- 24:26There's beyond the pale, right?
- 24:27So you don't want KKK values anywhere around that would be beyond the pale.
- 24:32So when are there right and wrong answers?
- 24:33I think that...
- 24:34There are some wrong answers certainly, but there's lots of right answers that are
- 24:37mutually incompatible, just like Patagonia's stance on some issues is going
- 24:41to be incompatible with the stance of, say, a hobby lobby.
- 24:45That said, there's also right and wrong answers as to, hey, does doing this
- 24:49actually help us to achieve our goals?
- 24:51Is this means sufficient to achieve our end?
- 24:54And then there are certainly right and wrong answers.
- 24:57They'll say, oh, we'll just do this.
- 24:59We'll just tell everyone x.
- 25:01And we'll say, that ain't going to do it.
- 25:03You could.
- 25:04That's not what's going to happen.
- 25:05You could tell them that, but that will definitely lead to a lot of things falling
- 25:08between the cracks.
- 25:09We highly recommend against that.
- 25:11So I think there's right and wrong and reasonable and unreasonable in the realm
- 25:15of what the values are, what the standards are, what the procedures are.
- 25:19And then there's right and wrong in terms of, are these means sufficient for
- 25:22achieving our ends?
- 25:23So you gave an example of can the CEO overrule the ethics board?
- 25:28How would you help a company think through what the answer is?
- 25:32Well, I mean, it's this.
- 25:34Look, if you really want to take the ethics of this seriously, then you have an
- 25:38ethics board, cross -functional ethics board, well -trained, both in, if you
- 25:44like, ethical deliberation on the kinds of issues they're going to face, but also
- 25:48well -trained in understanding, because usually it's this sort of board that's
- 25:53also going to oversee the rollout, compliance, and impact of the program,
- 25:57well -trained in how to oversee a program like this.
- 26:00And if you really want to prioritize ethics and trustworthiness, etc., then you
- 26:05say the decision by the ethics committee is the final one.
- 26:08That's it.
- 26:09What they say, if they say this is a no -go, then it's a no -go.
- 26:13And that's really good if you want to prioritize more than, you know, not maybe
- 26:16not more than anything, but very highly prioritize something like long -term
- 26:20trustworthiness of the brand, then you do that.
- 26:24That said, I think we need to be honest here and say, there's going to be cases
- 26:28where doing the unethical thing is going to be really profitable.
- 26:31There are sort of AI ethicists out there who say, oh, the right thing is also the
- 26:37profitable thing.
- 26:37And so we're like, no, that we're true.
- 26:39We wouldn't have to talk about ethics.
- 26:40We'd be done here because they would already do the profitable thing and then
- 26:43the ethics that would fall out of that.
- 26:44So there's clearly conflicts.
- 26:47And so if you say, listen, if you want to give yourself some wiggle room where
- 26:52the...
- 26:53The reward is so great, the ROI, say bottom line ROI is so great that you think
- 27:01the CEO should have the ability to override the ethics committee.
- 27:05That's not, it's not crazy.
- 27:07It's a little bit dangerous in the short term anyway, but it's not a crazy view to
- 27:12hold.
- 27:13In fact, I think in some cases it's quite reasonable to say, you know, yeah, this is
- 27:17a business at the end of the day and we're willing to take bigger risks.
- 27:21It's not.
- 27:22It's it's it's gonna tell me another context.
- 27:24I mean, there are certainly cases in which CEOs choose them morally abhorrent for
- 27:27some short -term profits.
- 27:28That's a bad thing.
- 27:30But should it be sort of, if you like, structurally disallowed by the
- 27:33organization?
- 27:34Probably not in many cases.
- 27:36If I'm looking at a company and trying to assess how serious they are, how effective
- 27:42they are in terms of what they're doing on AI ethics, are there things that I should
- 27:45look for, their tells?
- 27:56Let's start with that, sure.
- 27:57I'm a customer or I'm someone just trying to evaluate the company from the outside.
- 28:01You'll have no idea.
- 28:02No clue.
- 28:03The people, the sort of statements that they put out are phenomenally superficial.
- 28:07They're not going to make their policy public.
- 28:10They're usually not going to, you know, when we work with our clients, we train
- 28:14them how to do auditing, how to ready themselves for internal and external
- 28:18auditing of their AI ethics program.
- 28:20And in principle, they can make that stuff public.
- 28:22Number one, most companies are not there yet.
- 28:24They haven't done enough.
- 28:25They haven't done enough to audit.
- 28:27They're still designing the program.
- 28:29Some are at that audit stage, but most are not.
- 28:32And two, most of them are not going to be public about it.
- 28:35It just puts a target on their back.
- 28:36In the early days, this doesn't happen anymore, but five years ago, companies
- 28:42were way more resistant to being public about what they said about AI ethics or
- 28:46ethics generally because they felt that if we say that we really care about ethics,
- 28:50we're putting a target on our back for journalists to catch us.
- 28:53So if we say we care a lot about AI ethics and then something goes haywire, we're
- 28:57going to get skewered.
- 28:59by the journalist.
- 28:59So let's just shut up about it.
- 29:01Keep quiet.
- 29:01We'll do this stuff internally, but let's not tell everyone about it.
- 29:05That's changed over the last five years.
- 29:06Now it's more like, oh, whoa, everyone else is putting out AI ethics statements.
- 29:10We better put out an AI ethics statement to keep up.
- 29:12So that's good.
- 29:14But the statements are, by and large, phenomenally superficial and mean nothing.
- 29:17The average citizen, they don't know anything.
- 29:20Even if they look at the privacy policy of the organization, I've seen many examples
- 29:25of paper tigers, many examples where,
- 29:43do you measure success in terms of the work that you do with organizations?
- 29:48How do I measure success?
- 29:49That's a good question.
- 29:50I mean, you know, if they're just doing the things that we're telling them to do
- 29:54more or less, I mean, when I say what we tell them to do, we're giving them
- 29:56options.
- 29:57We say, look, you can build your program this way or that way.
- 30:01You know, for instance, we say, you can build an AI ethical risk program or
- 30:04responsible AI program, or you can build a digital ethics program.
- 30:07The digital ethics program will include AI, but it's also a bit broader than that
- 30:12to include other kinds of technologies, including ones that we don't, either
- 30:16applications of AI,
- 30:18that we don't have yet, new kinds of AI we don't have yet, new kinds of technologies,
- 30:23new applications, new technologies.
- 30:24So let's say blockchain, quantum, AR, VR.
- 30:29Ideally, they would all say, oh yeah, digital ethics.
- 30:32It's the broadest, it's the most comprehensive, it's the most proactive way
- 30:36we can address this.
- 30:37These issues aren't going away, they're only growing.
- 30:39So we say, look, digital ethics is ideal.
- 30:42But sometimes they say, listen, we'd love to do that.
- 30:46We don't have the internal buy -in for that.
- 30:48What we have, we have board support for building an AI ethics program.
- 30:54That's what we're not going to go back to them and say, you know, we want to do
- 30:56something bigger or we want to do something broader.
- 30:58That's where our buy -in is.
- 30:59That's the budget we have.
- 31:01That's where our focus is.
- 31:02That's what our priorities are.
- 31:03So that's what we're going to do.
- 31:05Is that a success or a failure on my view?
- 31:08It's still a success.
- 31:09You know, it's not the ideal, but it's, it's a success.
- 31:12What's another success if they actually move on to implementation?
- 31:16There are.
- 31:17plenty of organizations that will start to write an ethics statement and then just
- 31:20stop.
- 31:20That's a failure.
- 31:22You've got to get to the point of implementation.
- 31:24You've got to get to the point of training your people.
- 31:27This is, this is crucial.
- 31:29There's got to be that, if you like role agnostic training, the training that
- 31:32everyone across the organization gets, then there has to be role specific
- 31:35training.
- 31:36There has to be updates or augmentations of workflows of say data scientists,
- 31:41people in HR, et cetera.
- 31:43There has to be documentation.
- 31:44You know, there's got to be all these.
- 31:46things where it actually impacts the day -to -day operations.
- 31:50So what we like to say to our clients is, okay, you've done all this, blah, blah,
- 31:53blah, now we got to get the implementation, because you can write all
- 31:56this stuff, you can have this policy, but that doesn't mean that the data scientist
- 31:59knows what they need to do tomorrow at 9 a .m.
- 32:01when they get to work.
- 32:02This needs to be made clear.
- 32:04And if they don't get to that, that's maybe not yet a failure, but it's not yet
- 32:08a success.
- 32:10One thing that's changed in this area in recent years has been that there's been an
- 32:15upsurge of regulation and legislation and discussion and passage of things like the
- 32:20AI Act in Europe.
- 32:22How does that impact on what you do or on what companies actually do on the ground?
- 32:27Because on the one hand, now there's going to be all these requirements.
- 32:30On the other hand, if this just becomes a check the box for compliance, then it
- 32:34might actually be counterproductive.
- 32:35So what do you see?
- 32:37I think it's too early to tell.
- 32:39It's still TBD.
- 32:40Yeah, there are regulations out there.
- 32:42You know, New York City came out with a regulation not so long ago.
- 32:44I think it passed this past summer that all HR tools, sorry, all AI tools involved
- 32:52in the HR hiring decision -making process need to be audited by a third party.
- 32:58And that's not being enforced.
- 33:01I have no idea if it's had any impact at all.
- 33:04The EU AI Act.
- 33:06promises to do more That's plausible, especially if you're in the EU.
- 33:11Of course, there are lots of companies in the US who operate in the EU So they'll
- 33:15have to make sure that they're compliant as well It's gonna do something.
- 33:18I think it's just frankly it's too early to tell How much of an impact it's going
- 33:22to have one thing that I that I anticipate happening could be false The vast majority
- 33:28of owners of this kind of these kinds of problems within organizations are on the C
- 33:33suite on the tech side of the house
- 33:35So a chief data officer, a chief analytics officer, sometimes a chief information
- 33:38security officer or a chief information officer, chief digital officer, blah,
- 33:43blah, blah, blah, blah.
- 33:44It's the risk and compliance people, not so much involved.
- 33:48We ask, we say, look, it's great.
- 33:50We need to bring them to the table.
- 33:51We need them in these conversations.
- 33:53Legal is pretty standard to say, well, bring them to the table.
- 33:55But usually the risk and compliance people are not spearheading it.
- 33:59So I think operationally we'll probably see a change where it gets.
- 34:03less in the hands of tech people and more in the hands of those risk and compliance
- 34:09people, or at least if it's less in the hands of the data people, the risk and
- 34:13compliance people will have to get more involved because that's their job.
- 34:16So I think we'll see more of that.
- 34:17That in principle will be helpful because those chief data officers, what do they
- 34:22know about risk and compliance?
- 34:23They're not risk and compliance folks.
- 34:25They're engineers, they're data scientists, they build cool shit.
- 34:29That's not what they do.
- 34:31And so I think that having...
- 34:33trained risk and compliance people probably owning the program or at least
- 34:38playing a significant role in it will increase adoption.
- 34:42Will it be mere box checking?
- 34:45I don't know.
- 34:47Probably the beginning is my guess.
- 34:49There's also a way in which companies tend to overestimate what they're actually
- 34:52doing.
- 34:53So we'll ask companies, oh, so are you doing X, Y, and oh yeah, yeah, yeah.
- 34:56You're checking for bias?
- 34:56Yeah, yeah, yeah, yeah.
- 34:57We check for bias.
- 34:58And then we sort of start digging around and we find out, oh, not really.
- 35:02I mean like...
- 35:03The thing that they're doing is so minimal.
- 35:05And so there's also a level of self -deception, or at least ignorance, about
- 35:10how robust what they're doing actually is.
- 35:12So, you know, I'm optimistic, but it's a cautious optimism.
- 35:17I wouldn't be shocked if it turned out to be box -checking.
- 35:21And is there anything else that you see potentially coming in the next few years
- 35:26that's going to have a major impact on AI?
- 35:31I mean, there's two kinds of things, broadly speaking, that could have the
- 35:33impact.
- 35:34The, um, and they're, they're compatible.
- 35:35One is a big disaster.
- 35:40Think of like Cambridge Analytica, but for AI.
- 35:42And so if you get that kind of thing, that will help.
- 35:45And, uh, help.
- 35:47I mean, you know, that'll be the silver lining.
- 35:49That'll be a cause of people thinking more seriously.
- 35:52That might happen.
- 35:53It wouldn't surprise me.
- 35:54But the other thing is just, you know, death by a thousand cuts.
- 35:58It's so.
- 35:58there's this AI incident and then this one and then this one and then this one and
- 36:02this one, neither one of which is a massive crisis, but the aggregate should
- 36:06be terrifying, I think, eventually to people in the C -suite and the board
- 36:10responsible for protecting the brand or their organization.
- 36:12So I just think it's going to be the case that we're seeing increased adoption and
- 36:17as you get increased adoption, you get increased deployment and increased
- 36:20deployment means increased probability of things going ethically sideways.
- 36:25And so you get more things going ethically sideways and they're going to be
- 36:27published, et cetera, et cetera.
- 36:29On that note, by the way, increased adoption, there are some people who say,
- 36:34oh, generative AI, it's been a year already, or it's been a year and two
- 36:38months, whatever.
- 36:39We haven't seen the massive change yet.
- 36:41And I just think, just chill, just hold on.
- 36:44We're talking about the most cutting edge technology out there.
- 36:46They're working on it.
- 36:47They're figuring it out.
- 36:49Most of our clients are running dozens, and in some cases, hundreds of pilots
- 36:55using generative AI.
- 36:56They're just trying to figure out how this thing works.
- 36:58They're trying to figure out.
- 36:59Does it solve a business problem for us?
- 37:00What business problem does it solve?
- 37:01How do we use it responsibly?
- 37:03So, you know, for all the talk about, oh, it's been, it's out here.
- 37:08No, not really.
- 37:09Open AI released their stuff a year and a bit ago.
- 37:12Google a little bit less than that.
- 37:15Then there's all these other, you know, llama and anthropic.
- 37:19Just wait a second.
- 37:20We're going to see, I would, unless things go oddly haywire, we're going to see lots
- 37:27of adoption, lots of deployment.
- 37:28in 2024, let alone 2025.
- 37:32And with the increased adoption, we're going to see more bad incidents.
- 37:37All right, well, more bad incidents, but hopefully also more good work for people
- 37:41like you.
- 37:42Yeah, I mean, I should say, you know, this comes against the backdrop of being, I
- 37:46don't know, not a pessimist about the technology.
- 37:48I'm not a catastrophist.
- 37:49I mean, there are some people out there who are screaming that the sky is falling
- 37:52and everyone's going to die and this is a disaster and it's not ready for prime time
- 37:57and it never will be.
- 37:58I just think that's sort of stupid.
- 38:00I mean, I've seen use cases that work and they do amazing things.
- 38:03There are cases, I was recently talking to an organization yesterday that said they
- 38:07implemented a generative AI solution for certain kinds of...
- 38:11search and summarization of a process that used to take 40 hours and now it takes
- 38:16four.
- 38:17And they are happy with the results.
- 38:18They're happy with the metrics.
- 38:19They're happy with how it's level of accuracy.
- 38:21They're happy with the level of risk that there is in the particular use case that
- 38:24it is.
- 38:26Just give it, there'll be more.
- 38:27That's a well -funded, you know, organization with lot who has lots of
- 38:30power to throw out these kinds of problems.
- 38:32Others don't have that kind of power or they're slower.
- 38:34They want to see what others are doing.
- 38:36But yeah, I'm not a catastrophist.
- 38:38I think that there's tremendous good opportunity.
- 38:41And yeah, there's lots of opportunity though to make sure for people like me
- 38:44that to help organizations make sure they don't go off the rails.
- 38:48Reed, thanks so much for this conversation.
- 38:50It's been really instructive and fascinating.
- 38:52my pleasure.