From Demos to Defensible in Financial Services Copyright & Compliance for Enterprise AI - Naveen Kumar of TD Bank

2026-02-10 · Source: The AI in Business Podcast · Field: Finance & Economics — Banking & Financial Services, Artificial Intelligence & Machine Learning, Compliance & Risk Management · Depth: Intermediate, long

Summary

Naveen Kumar, Head of AI Governance at TD Bank, discusses critical challenges hindering AI adoption in banking, including data leakage, prompt injection, shadow AI, and hallucinations. He outlines the risks associated with AI outputs, such as copyright infringement from using copyrighted resources and compliance breaches due to regulatory or privacy policy violations. Kumar also highlights data usage and licensing risks, where proprietary or licensed data used incorrectly can lead to legal issues, and attributability/auditability risks, where AI-generated content lacks traceable origins. The discussion emphasizes the need for transparent data pipelines, guardrails for AI outputs, human-in-the-loop review, and comprehensive logging for auditability to ensure AI is both productive and defensible in enterprise settings.

Key takeaway

For AI Product Managers navigating enterprise AI adoption in regulated industries, you must prioritize building AI literacy across teams and implementing continuous monitoring tools. Establish clear AI policies and provide secure sandbox environments to prevent shadow AI and data leakage, ensuring your organization can innovate productively while remaining defensible against copyright and compliance risks.

Key insights

Secure AI adoption in regulated sectors requires robust governance to mitigate copyright, compliance, and data privacy risks.

Principles

• AI outputs must be traceable to their data sources.
• Human oversight is crucial for high-stakes AI decisions.
• Proactive risk management prevents legal and regulatory exposure.

Method

Implement transparent data pipelines, establish AI output guardrails, integrate human-in-the-loop review, and maintain comprehensive audit logs for all AI decisions, inputs, and outputs.

In practice

• Use role-based AI guardrails for data access.
• Provide safe sandboxes for AI experimentation.
• Deploy hybrid AI models for sensitive data.

Topics

• AI Governance
• Banking AI
• AI Risk Management
• Data Privacy
• Copyright Compliance

Best for: CTO, VP of Engineering/Data, AI Product Manager, Director of AI/ML, Executive, Legal Professional

Related on AIssential

• Hidden AI, Real Risk: A Governance Roadmap For Mid-Market Organizations — Unsanctioned AI tool use by employees creates data risks and necessitates structured organizational management.
• For publishers and rights owners, the EU playbook rewards those who turn rights enforcement into repeatable infrastructure (opt-out + monitoring + evidence). — The EU balances AI innovation with copyright protection via TDM exceptions and AI Act transparency.
• Opinion | AI Regulation Needs a ‘Bank Examiner’ — AI regulation is shifting towards a "bank examiner" model, emphasizing expert supervision over product-safety laws.
• The most profound and least understood risk facing AI developers is endogenous: the very technology they are building is rapidly acquiring the computational and analytical capability... — AI's inherent analytical power is exposing its creators' unsustainable financial, legal, and technical vulnerabilities.
• The Digital Iron Curtain: How the EU AI Act Is Strangling European Innovation — The EU AI Act's high compliance costs and restrictive classifications are stifling European AI innovation and competitiveness.
• Small Businesses Are Using AI. Most of Them Are Using It Wrong. — Small businesses widely adopt AI without governance, creating significant liability and hindering effective integration.

Open in AIssential →

Editorial summary, takeaway, and curation by AIssential. Original article published by The AI in Business Podcast.