WHAT YOUR ORGANISATION NEEDS TO KNOW ABOUT AI RISK AND PRIVACY