Perspectives

What are some possible Generative AI risks?

The CLO’s guide to Generative AI risks and opportunities

Generative AI (GenAI) presents many opportunities for organizations. It is particularly suited for process optimization of highly repeatable and data-centric tasks and tasks related to product development, customer experience enhancement, and predictive analytics. One key to assessing what opportunities may be available to your organization is to (1) understand how your company goes about doing its business; (2) identify tasks in those key workflows that are amenable to AI optimization; (3) assess the potential risks associated with those use cases; and (4) if those risks can be managed within your organization’s risk tolerance, implement AI in a safe, reliable, and compliant manner.

Many of the risks associated with AI are not unique. For example, the use of GenAI poses sustainability, data privacy, and security risks, to name a few. With that said, the National Institute of Standards and Technology (NIST)—the organization responsible for promoting innovation and industrial competitiveness by advancing measurement science, standards, and technology—finds that “AI systems also bring a set of risks that are not comprehensively addressed by current risk frameworks and approaches” [emphasis ours].1 NIST and others have identified more than a dozen risks unique to AI or uniquely intensified by AI.

Categories of GenAI risk vary based on the industry and specific use case, but can include regulatory uncertainty, product liability, fraud/misrepresentations, limited AI fluency and unharmonized terminology, fragmented internal safeguards, intellectual property, confidentiality, AI systems quality concerns, data privacy, cybersecurity, lack of accuracy, unfair bias, insufficient contractual protections, unclear procurement standards, and reputational harm.

This section is an infogram

This message and the space it occupies will not be displayed when viewing this page either in Live, Preview, or "View as published" modes

Other Generative AI topics to explore

Learn about other areas of Generative AI and how it impacts CLOs and their teams. From the basics to the more complex challenges, these resources are designed to help you navigate GenAI’s legal implications and risks with ease. 

1 National Institute of Standards and Technology (NIST), Artificial Intelligence Risk Management Framework (AI RMF 1.0), January 2023.
2 Deloitte, Proactive risk management in Generative AI, 2023.
3 Ibid.
4  Jeff Loucks, “Deepfakes and AI,” October 26, 2018; Ali Swenson, “FEC moves toward potentially regulating AI deepfakes in campaign ads,” Associated Press, August 10, 2023. 
Richard Torrenzano, “Generative A.I. has supercharged the speed at which false information spreads. Can our reputations survive the ‘two-hour internet day?’,” Fortune, July 18, 2023.

Fullwidth SCC. Do not delete! This box/component contains JavaScript that is needed on this page. This message will not be visible when page is activated.

Insert Custom HTML fragment. Do not delete! This box/component contains code that is needed on this page. This message will not be visible when page is activated.
+++ DO NOT USE THIS FRAGMENT WITHOUT EXPLICIT APPROVAL FROM THE CREATIVE STUDIO DEVELOPMENT TEAM +++

Get in touch

Danny Tobey MD, JD profile image

Danny Tobey MD, JD

Partner
Chair | Americas AI & Data Analytics Practice
Co-Chair | Global AI & Data Analytics Practice
DLA Piper

danny.tobey@dlapiper.com

Barclay Blair profile image

Barclay Blair

Senior Managing Director | AI Innovation Team
DLA Piper

barclay.blair@dlapiper.com

J. Donald Fancher profile image

J. Donald Fancher

Principal | Deloitte Risk & Financial Advisory
Leader | Chief Legal Officer Program
Deloitte Financial Advisory Services LLP

dfancher@deloitte.com

Ashley Allen Carr profile image

Ashley Allen Carr

Partner
DLA Piper

ashley.carr@dlapiper.com

Sean Patrick Fulton profile image

Sean Patrick Fulton

Counsel
DLA Piper

sean.fulton@dlapiper.com

Jon Foster profile image

Jon Foster

Managing Director | Deloitte Risk & Financial Advisory
Deloitte Transactions and Business Analytics LLP

jonfoster@deloitte.com

Erin Hess profile image

Erin Hess

Research and Insights Manager
Chief Legal Officer Program
Manager | Deloitte Risk &
Financial Advisory
Deloitte Transactions and
Business Analytics LLP

erhess@deloitte.com

This document contains general information only and the authors are not, by means of this document, rendering accounting, business, financial, investment, legal, tax, or other professional advice or services. This document is not a substitute for such professional advice or services, nor should it be used as a basis for any decision or action that may affect your business. Before making any decision or taking any action that may affect your business, you should consult a qualified professional advisor.

The authors shall not be responsible for any loss sustained by any person who relies on this document.

As used in this document, “Deloitte” means Deloitte Financial Advisory Services LLP, which provides risk and financial advisory services, including forensic and dispute services; and Deloitte Transactions and Business Analytics LLP, which provides risk and financial advisory services, including eDiscovery and analytics services. Deloitte Transactions and Business Analytics LLP is not a certified public accounting firm. These entities are separate subsidiaries of Deloitte LLP. Please see www.deloitte.com/us/about for a detailed description of our legal structure. Certain services may not be available to attest clients under the rules and regulations of public accounting. Deloitte does not provide legal services and will not provide any legal advice or address any questions of law.

Copyright © 2025 Deloitte Development LLC. All rights reserved.

Copyright © 2025 DLA Piper. All rights reserved.