Risky algorithms

Risky algorithms

As algorithms become more sophisticated, the risk of spreading hidden bias in organisational decision-making is increasing, according to a recent paper contained in the Canadian Institute of Actuaries’ newsletter Enterprise risk management 2019: the new wave of risks. Alogorithms are becoming increasingly embedded in business processes. Machine-learning algorithms tend to break away from the rules…

As algorithms become more sophisticated, the risk of spreading hidden bias in organisational decision-making is increasing, according to a recent paper contained in the Canadian Institute of Actuaries’ newsletter Enterprise risk management 2019: the new wave of risks.

Alogorithms are becoming increasingly embedded in business processes. Machine-learning algorithms tend to break away from the rules they were initially programmed to follow, and may create novel rules based on the data they have analysed. This can inject opacity in the decision-making process, according to  an article in the newsletter, ‘Algorithms gone wild’, by Saisai Zhang a senior consultant in actuarial, rewards and analytics at Deloitte.

Take away

“The key takeaway is that companies should strive to understand why opacity exists,” writes Zhang, “and situate it in the context where algorithms are deployed, rather than taking opacity as an inherent trait. Targeted risk management strategies, such as algorithm audit or validation, can be devised to effectively mitigate potential losses.”

Algorithms have been found to be at the base of gender and racial baises in a wide range of applications, suggesting that they may reflect the subconscious prejudices of their programmers. Because the way that algorithms come to decisions can be impossible to trace, their use could be restricted under regulations such as the EU’s General Data Protection Regulation (GDPR).

“GDPR poses restrictions on algorithms that make decisions based on user-level inputs, stressing an individual’s ‘right to explanation’ when subjected to an algorithmic decision that significantly affects them,” writes Zhang. “Most importantly, it explicitly states that an individual shall have the right not to be subject to a decision based ‘solely’ on auto- mated processing, including profiling.”

Questions for businesses

Are companies aware of the presence of algorithmic risks?

  • How do companies develop policies and cultivate a corporate culture that ensures algorithmic risks are understood across its functions?
  • What does an effective algorithmic risk management framework look like?
  • What are the ethical considerations surrounding automated decision-making, including data collection and privacy concerns?
  • Who are the right talents in the era of algorithms?
  • How do we retain full control over the technologies that are impacting our lives and making the decisions for us?

Other articles in the newsletter include, reflection and advice on the legalisation of cannabis in Canada; advancing an organisation’s enterprise risk management capabilities; and building a strong risk culture.

To read more, follow this link.





← Previous

Using scenarios to quantify corporate risks
By Lee Coppack Consumer spending comprises more than 50 per cent of gross domestic product…






Next →

Risk maturity lags behind developing threats
Regulatory risk and economic uncertainty have topped a poll conducted by the consultancy Protiviti as…

9 SEPTEMBER 2026

Owning your space: confidence, visibility & voice

This event marks the formal public launch of the IRM Women in Risk Special Interest Group. The session is themed around the most pressing personal and professional challenges identified by women in the risk profession today.

Find out more

10 SEPTEMBER 2026

Beyond compliance

Managing equity compensation risk through automation, governance and the unified equity compensation risk & automation framework (UECRAF).

Find out more

17 SEPTEMBER 2026

Building an effective risk culture in your organisation

The proactive cultivation of an effective risk culture can serve as a strategic differentiator, enhancing the organisation’s resilience, agility, and reputation in the eyes of customers, investors, and regulators alike.

Find out more

Advertisement