AI governance and privacy