AI systems that use personal data must be designed to protect privacy, maintain confidentiality, and prevent unauthorised access or use. They must also be subject to ethical and legal frameworks that safeguard the rights and interests of individuals.