1. Project Management Institute. (2024). Project Management for AI. Project Management Institute. Chapter 4, "AI Project Governance and Ethics," emphasizes that a governance framework is crucial for defining data management policies, access controls, and ensuring compliance with legal and regulatory standards. It notes that governance provides the structure to manage the very risks (like data misuse) described in the scenario.
2. Jobin, A., Ienca, M., & Vayena, E. (2019). The global landscape of AI ethics guidelines. Nature Machine Intelligence, 1(9), 389–399. This study highlights that a primary challenge is the gap between high-level ethical principles (which the team has) and their practical implementation. This gap is bridged by robust governance mechanisms that enforce accountability and define operational procedures, which are clearly missing in the project. (See section "From principles to practice," p. 394). https://doi.org/10.1038/s42256-019-0088-2
3. Fjeld, J., Achten, N., Hilligoss, H., Nagy, A., & Srikumar, M. (2020). Principled Artificial Intelligence: Mapping Consensus in Ethical and Rights-Based Approaches to Principles for AI. Berkman Klein Center Research Publication No. 2020-1. This research underscores that principles require concrete governance structures for enforcement. The paper discusses the necessity of "oversight and enforcement mechanisms" (p. 18) to ensure principles are followed, which directly addresses the failure described in the question where ethics guidelines alone are insufficient to prevent data misuse.