AI systems can rely on large volumes of resident, applicant, employee, property, and operational data. Sensitive information may be collected for one purpose and later repurposed for model training, profiling, or automated decision support. Strong controls are needed for consent, minimization, retention, access, deletion, security, and cross-border transfers.
Intellectual-property questions also remain unsettled. AI-generated floor plans, marketing copy, imagery, and other outputs may incorporate protected material or rely on training sources that are difficult to verify. Vendor agreements should address data ownership, permitted training uses, infringement claims, confidentiality, and rights to generated outputs.
Sources: OneTrust, 2025; Bilzin Sumberg, 2025; MLT Aikins, 2025