What is the MIT AI Risk Repository?

A living database of AI risks extracted from 74 frameworks, taxonomies and papers, classified by a causal taxonomy (entity, intent, timing) and a domain taxonomy (7 domains, 24 subdomains). Published by the MIT AI Risk Initiative under CC BY 4.0.

Can I download the filtered risk list?

Yes. Apply filters and use Export CSV or Export JSON; the file carries the source, licence and citation so it can be reused with attribution.

MIT AI Risk Repository

Browse AI risks

Name: MIT AI Risk Repository: AI Risk Database (browseable copy)
Creator: MIT AI Risk Initiative
License: https://creativecommons.org/licenses/by/4.0/

8 risk entries extracted from 74 frameworks, coded by domain, subdomain, causal entity, intent and timing. Filter, then export the current selection with its licence and citation attached.

Export CSV Export JSON

8 entries

65.03.01 · Risk Sub-Category

Training Data Risks (Privacy)

Personal information in data

"Inclusion or presence of personal identifiable information (PII) and sensitive personal information (SPI) in the data used for training or fine tuning the model might result in unwanted disclosure of that information."

From AI Risk Atlas (IBM2025)

Domain 2 2.1 AI Unintentional Post-deployment
65.03.03 · Risk Sub-Category

Training Data Risks (Privacy)

Reidentification

"Even with the removal or personal identifiable information (PII) and sensitive personal information (SPI) from data, it might be possible to identify persons due to correlations to other features available in the data."

From AI Risk Atlas (IBM2025)

Domain 2 2.1 Other Unintentional Pre-deployment
65.05.02 · Risk Sub-Category

Training Data Risks (Intellectual property)

Confidential information in data

"Confidential information might be included as part of the data that is used to train or tune the model."

From AI Risk Atlas (IBM2025)

Domain 2 2.1 Human Unintentional Pre-deployment
65.11.03 · Risk Sub-Category

Inference risks (Privacy)

Personal information in prompt

"Personal information or sensitive personal information that is included as a part of a prompt that is sent to the model."

From AI Risk Atlas (IBM2025)

Domain 2 2.1 AI Unintentional Post-deployment
65.12.01 · Risk Sub-Category

Inference risks (Intellectual property)

Confidential data in prompt

"Confidential information might be included as a part of the prompt that is sent to the model."

From AI Risk Atlas (IBM2025)

Domain 2 2.1 Other Unintentional Post-deployment
65.12.02 · Risk Sub-Category

Inference risks (Intellectual property)

IP information in prompt

"Copyrighted information or other intellectual property might be included as a part of the prompt that is sent to the model."

From AI Risk Atlas (IBM2025)

Domain 2 2.1 Other Unintentional Post-deployment
65.16.02 · Risk Sub-Category

Output risks (Intellectual Property)

Revealing confidential information

"When confidential information is used in training data, fine-tuning data, or as part of the prompt, models might reveal that data in the generated output. Revealing confidential information is a type of data leakage."

From AI Risk Atlas (IBM2025)

Domain 2 2.1 AI Unintentional Post-deployment
65.20.01 · Risk Sub-Category

Output risks (Privacy)

Exposing personal information

"When personal identifiable information (PII) or sensitive personal information (SPI) are used in training data, fine-tuning data, or as part of the prompt, models might reveal that data in the generated output. Revealing personal information is a type of data leakage."

From AI Risk Atlas (IBM2025)

Domain 2 2.1 AI Unintentional Post-deployment

Informational only, not legal advice. Verify every claim against the linked official sources and consult qualified counsel before acting.