AllianceBernstein Mandates Data-Level Audits to Stop AI Model Drift

Data Practices for Responsible AI With AllianceBernstein — Ai4

Ai4

Asset managers must embed validation, fairness metrics, and privacy safeguards directly into data ingestion pipelines before training, as post-hoc compliance cannot prevent look-ahead bias or costly capital misallocations.

AI-assisted summary of Data Practices for Responsible AI With AllianceBernstein — original source. Check the original for full context.

Source published:

Detailed notes

## Background Published on YouTube by the Ai4 conference channel on August 27, 2025, this presentation features Yuyu Fan, Principal Data Scientist at AllianceBernstein. According to the video description, the session details data-centric solutions for responsible AI in financial asset management, covering bias detection, rigorous data governance, explainable AI methods, and risk-aware modeling practices like stress testing.

## TL;DR Drawing on operational experiences from an asset management firm overseeing more than $800 billion in AUM, Yuyu Fan argues that responsible AI must be engineered directly at the foundational data layer rather than treated as an afterthought. The talk provides concrete methodologies for maintaining data quality across market regime shifts, ingestion latencies, and complex missingness mechanisms (MCAR, MAR, MNAR). Fan further explores practical mitigations for data imbalance and look-ahead bias in financial models, alongside data privacy strategies ranging from differential privacy to upfront PII redaction for LLM deployments. Ultimately, she emphasizes that long-term enterprise trust requires embedding ethical stewardship and accountability into system design from day one.

## Atmosphere & style The presentation carries a measured, pragmatic, and technically rigorous tone, blending hard quantitative realities with philosophical reflections on ethics and trust. Fan speaks with the grounded clarity of an institutional practitioner, seamlessly pivoting from granular data engineering challenges—such as missing lease terms in REIT factor modeling and earnings transcript latency—to broader cultural touchstones like Kant's moral law and *The Matrix*'s red pill dilemma. The narrative arc builds toward a sober, cautionary conclusion, evoking AI pioneer Geoffrey Hinton's personal reflections to urge the audience to prioritize proactive ethical alignment over convenient, frictionless deployment.

## Key takeaways - [00:04](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=4s) Responsible AI in quantitative asset management must be grounded in foundational, data-centric statistical practices rather than treated as a reactive, post-hoc compliance checklist. - [01:44](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=104s) Failing to implement proactive AI safeguards leads to severe systemic risks, from executive deepfake fraud to algorithmic bias in automated screening pipelines. - [04:55](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=295s) Responsible financial AI requires institutional accountability and auditability, meaning asset managers cannot deflect liability to automated systems when capital allocations or trades fail. - [10:52](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=652s) Robust data validation pipelines combine statistical baseline metrics, unsupervised anomaly detection (like Isolation Forests), and secondary reference cross-checks before data enters production alpha models. - [15:01](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=901s) Substantial ingestion latency disparities—such as emerging market transcripts lagging up to two months compared to 20–30 minutes for US equities—create major fundamental risks during periodic portfolio rebalancing. - [16:23](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=983s) Extracting investment signals from high-noise unstructured data requires rigorous empirical validation through both retrospective historical backtesting and out-of-sample forward paper trading. - [19:04](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=1144s) Resolving missing data in financial factor modeling depends on identifying the mathematical mechanism (MCAR, MAR, or MNAR), requiring tailored strategies such as sector-specific model architectures or universe cutoffs rather than naive imputation. - [24:07](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=1447s) Training cutoff contamination in foundational LLMs introduces look-ahead bias, making it difficult to distinguish genuine forward-looking fundamental analysis from memorized historical market winners. - [25:20](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=1520s) Training global distribution models across diverse geographic regions can cause dominant majority markets to corrupt predictive accuracy in smaller jurisdictions with lower transaction volumes. - [28:22](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=1702s) Client redemption and propensity models should employ cost-sensitive evaluation weighted by capital exposure (AUM) rather than treating all account losses equally. - [34:12](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=2052s) Because training generative models with Differential Privacy (DP-SGD) incurs heavy computational overhead and accuracy degradation, practical LLM privacy relies on upfront local PII redaction and parameter-efficient fine-tuning (PEFT). - [38:04](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=2284s) Ethics by design must be integrated into AI architectures before collecting data and training models, reflecting Geoffrey Hinton's cautionary note that ethical considerations should have been prioritized far earlier in AI development.

## Detailed walkthrough ### [00:04](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=4s) Introduction and Central Data Science at AllianceBernstein

Yuyu Fan, Principal Data Scientist at AllianceBernstein (AB)—an asset management firm managing over $800 billion in assets under management (AUM)—opens the session by outlining her vantage point across the enterprise. Working within a centralized data science team, she bridges the gap between technology and practical business execution across three primary pillars of the firm: investment management, distribution, and business operations. Her work spans generating quantitative investment signals for portfolio managers to identifying and qualifying client leads for sales teams.

While discussions around artificial intelligence often gravitate toward generative AI, the discipline fundamentally encompasses statistical machine learning techniques developed over the past three decades. Establishing responsible AI systems requires starting with data-centric, foundational statistical metrics and practices. Citing Geoffrey Hinton's remarks from earlier that morning—that as AI systems surpass human intelligence, we must ensure they are designed with features that genuinely care about humanity—incorporating responsible AI practices at the data level is the baseline requirement for building trustworthy systems.

- **Speaker Role:** Yuyu Fan, Principal Data Scientist, AllianceBernstein. - **Firm Scale:** Over $800 billion in Assets Under Management (AUM). - **Core Coverage:** Enterprise-wide data science initiatives across investment signal generation, sales distribution leads, and operations.

---

[01:44](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=104s) The Urgent Need for Responsible AI: Trust, Scams, and Bias

Failing to build AI responsibly introduces profound risks that extend far beyond technical errors into systemic crises of trust. In the financial sector, bad actors use advanced deepfake technologies to impersonate C-suite executives and execute high-stakes corporate fraud. When individuals receive reports, transaction requests, or messages, the erosion of authenticity creates uncertainty over whether the content is human-generated, verified information or malicious synthetic output.

This vulnerability affects retail consumers just as acutely as corporate executives. AI-fueled cryptocurrency scams surged by more than 400% between June and April. Beyond overtly malicious attacks, systems built with good intentions can cause unintended societal harm through ingrained data bias. For instance, algorithmic resume screening models trained on historical corporate hiring records often favor specific applicant profiles over others due to past underrepresentation in gender, job titles, or non-traditional backgrounds. To avoid a scenario of "fixing the fences after the sheep have been lost," organizations must proactively mitigate these risks at the foundational data layer.

```mermaid flowchart TD accTitle: Harms of Irresponsible AI accDescription: Flow showing how irresponsible AI causes financial fraud, consumer scams, and algorithmic bias.

subgraph Harms["Risks of Irresponsible AI"] A["Deepfake Impersonation"] --> B["Executive & Corporate Fraud"] C["AI-Driven Phishing"] --> D["Crypto Scams Booming >400%"] E["Historical Data Bias"] --> F["Inequities in Resume & Credit Screening"] end

B --> G["Erosion of Trust & Systematic Harm"] D --> G F --> G ```

- **Executive Impersonation:** Deepfake audio/video used to mimic corporate leadership for unauthorized financial transfers and fraud. - **Surge in Scams:** AI-augmented cryptocurrency scams rose over 400% within a ten-month window (June to April). - **Algorithmic Bias:** Historical hiring data creates feedback loops that systematically penalize underrepresented demographics in automated screening.

---

[04:55](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=295s) Core Pillars of Responsible AI in Financial Asset Management

Building responsible AI in finance involves balancing several critical, interlocking operational and ethical dimensions:

1. **Data Quality:** Assessing accuracy, reliability, timeliness, completeness, and signal-to-noise ratio—a notoriously difficult challenge in finance, where market data is overwhelmingly noisy and sparse in genuine alpha signals. 2. **Fairness:** Ensuring datasets fed into models do not introduce discriminatory outcomes across protected groups. 3. **Privacy & Security:** Safeguarding sensitive client records and transactions across distribution and institutional pipelines. 4. **Transparency & Explainability:** Providing complete audit trails from model outputs back to input features, moving beyond black-box explanations (such as SHAP values) to trace how raw data transformations dictate final predictions. 5. **Auditability & Accountability:** Clarifying institutional liability. Drawing an analogy to autonomous vehicles like Waymo, which face regulatory hurdles regarding accident liability, asset managers cannot simply deflect blame by claiming "the AI made the decision" when client trades or capital allocations fail. 6. **Regulation & Compliance:** Adhering strictly to frameworks such as the EU AI Act and GDPR, which establish tiered risk categorizations and strict data usage parameters. 7. **Do No Harm:** Transcending codified legal checkboxes by adopting ethical stewardship. Echoing Immanuel Kant's famous maxim—"Two things fill the mind with ever new and increasing admiration and awe... the starry heavens above me and the moral law within me"—practitioners must exercise internal moral judgment regarding the downstream human impact of their models.

---

[10:52](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=652s) Deep Dive: Ensuring Data Quality and Anomaly Detection

To translate responsible AI principles into concrete engineering workflows, the framework centers on three deep-dive pillars: **Quality**, **Fairness**, and **Privacy**.

```mermaid flowchart LR accTitle: Data Validation Pipeline accDescription: Workflow of automated data validation and anomaly detection steps.

subgraph Ingestion["Data Ingestion"] A["Raw Financial Data"] end

subgraph Validation["Validation Pipeline"] B["Descriptive Stats<br/>(Mean, Variance, IQR)"] C["Unsupervised ML<br/>(Isolation Forests)"] D["Supervised & LLM Checks<br/>(Classification / Few-Shot)"] end

subgraph Verification["Cross-Check"] E["Reference Data Cross-Checks"] F["Clean, Audited Dataset"] end

A --> B --> C --> D --> E --> F ```

Data quality forms the bedrock of both proprietary internal models and third-party foundation model APIs. To guarantee data fidelity, automated validation pipelines should run systematic checks:

- **Descriptive & Distributional Statistics:** Continuously calculating baseline metrics such as mean, variance, and distributional skew to verify incoming data matches expected profiles. - **Unsupervised Anomaly Detection:** Applying statistical rules (such as Interquartile Range / IQR thresholds) alongside unsupervised algorithms like Isolation Forests to isolate multivariate outliers when ground-truth labels are absent. - **Supervised Classification & LLM Few-Shot Verification:** Deploying supervised anomaly classifiers and prompting large language models with annotated edge-case examples to flag suspicious account transactions or malformed client attributes. - **Reference Data Cross-Checking:** Validating financial records and client transaction logs against independent secondary reference datasets to reconcile discrepancies before feeding features into downstream production pipelines.

[13:17](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=797s) Data Reliability, Market Regimes, and Stationarity

Data accuracy alone is insufficient in quantitative asset management; datasets must also remain reliable across time. When maintaining financial time-series pipelines for investment teams, practitioners cannot simply validate data once and assume it will remain static. Market regime shifts and macro changes frequently introduce distribution and data drifts. To safeguard models against unexpected degradation, teams implement continuous monitoring pipelines that track statistical properties and data ingestion volume. For example, when ingesting news feeds, sudden drop-offs—such as an intake plunging from 10,000 articles one day down to 5,000 the next—must trigger automated investigations to determine whether the anomaly reflects an expected calendar event (a weekend or market holiday) or an upstream data delivery failure.

Beyond tracking ingestion volumes and pipeline resilience infrastructure, financial time-series modeling requires rigorous statistical validation, notably stationarity checks. Because non-stationary series can create spurious correlations and mislead statistical learning algorithms, stationarity testing forms an essential baseline before data enters production alpha-generation models.

[15:01](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=901s) Timeliness, Ingestion Latency, and Data Freshness

The operational value of financial data depends heavily on timeliness and latency. In intraday trading contexts, execution algorithms require minimal data lag, whereas portfolio construction workflows rely on "freshness scores" to measure whether information arrives at the expected frequency. Data delivery speeds vary significantly by geography and asset market. For major US equities (such as the Russell 1000 or S&P 500), corporate earnings call transcripts stream into internal databases within 20 to 30 minutes after a call concludes.

Conversely, sourcing earnings calls from emerging markets presents severe lags, with initial transcript versions occasionally taking up to two months to arrive. Operating on stale data poses severe risks to periodic portfolio rebalancing. If a portfolio manager rebalances a portfolio on a Monday relying on an earnings call that occurred months earlier, the underlying fundamental thesis is outdated and non-informative.

- **US Equity Ingestion:** Russell 1000 earnings call transcripts typically stream into production databases within 20–30 minutes of call completion. - **Emerging Markets Latency:** Transcripts can face lags of up to two months before the first clean version is available. - **Portfolio Construction Risk:** Using stale corporate disclosures during weekly or monthly rebalancing introduces unintended positioning risks.

[16:23](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=983s) Signal-to-Noise Ratios and Unstructured Data Processing

Financial data sources—spanning text, audio, image feeds, cellular telemetry, and foot traffic records—are notoriously noisy and demand intensive preprocessing before yielding actionable investment signals. For large-scale unstructured news datasets, models must perform company entity tagging, topic extraction, and granular sentiment analysis mapped to specific corporate components and themes. Executing this tagging reliably across millions of documents is computationally intensive and GPU-heavy.

```mermaid flowchart TD accTitle: Signal Validation Lifecycle accDescr: Pipeline showing data preprocessing, signal extraction, backtesting, and forward simulation.

subgraph Ingestion["1. Preprocessing & Tagging"] A["Unstructured Data<br/>(News, Audio, Traffic)"] --> B["GPU-Heavy Tagging<br/>(Entities, Topics, Sentiment)"] end

subgraph Evaluation["2. Empirical Validation"] B --> C["Alpha Signal Extraction"] C --> D["Historical Backtesting<br/>(Retrospective Validity)"] D --> E["Forward Simulation<br/>(Paper Trading & Drift Checks)"] end ```

To verify whether a derived signal possesses a sufficient signal-to-noise ratio, quantitative researchers subject it to a two-phase empirical validation process: - **Historical Backtesting:** Retrospective testing across historical market regimes to evaluate whether the extracted signal consistently generates predictive power. - **Forward Simulation (Paper Trading):** Out-of-sample forward simulation that mimics live trade execution to ensure real-world market frictions and operational constraints do not erode expected performance.

[17:39](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=1059s) Missing Data Patterns: MCAR and Systemic Coverage Gaps

Missing data is pervasive across real-world financial records, and handling it appropriately requires identifying the mathematical missingness mechanism rather than blindly applying naive imputation. The first category is Missing Completely at Random (MCAR), where the absence of data is independent of both observed features and the underlying missing values themselves.

In historical transcript analysis, earnings call audio and transcripts prior to 2008 were not systematically documented, digitized, or archived across broad benchmarks like the S&P 500 or Russell 1000. While sporadic transcripts from that era exist, the missingness does not stem from specific company performance or industry sector traits; it is an artifact of legacy data collection infrastructure. Consequently, backtesting and signal generation pipelines for transcript NLP models are restricted to starting around 2010 to guarantee consistent universe coverage and statistical validity.

[19:04](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=1144s) Missing at Random (MAR) in Sector Factor Modeling

Missing at Random (MAR) occurs when missingness is systematically related to observed characteristics or features within the dataset. In a real estate investment trust (REIT) factor-modeling workflow designed for stock selection, specific metrics exhibit structural missingness across sub-sectors. For instance, the feature measuring *average lease terms* is almost entirely absent for hotel REITs. This absence is logical: hotel guests stay for transient periods (such as a few days for a conference), whereas residential housing, commercial offices, and data center REITs operate on multi-year lease contracts that secure recurring revenue streams.

```mermaid flowchart LR accTitle: Handling MAR in REIT Modeling accDescr: Two distinct strategies for handling sector-dependent missing lease terms in REIT data.

A["REIT Feature:<br/>Average Lease Term"] --> B{"Model Architecture"}

subgraph Approach1["Generic Cross-REIT Model"] B --> C["Impute Cross-Sectional Mean<br/>for Hotel Sector"] C --> D["Hotels rank near center;<br/>informational spread preserved"] end

subgraph Approach2["Sector-Specific Models"] B --> E["Drop Lease Term Feature<br/>in Hotel Model"] E --> F["Retain Feature for Data Centers<br/>& Commercial REIT Models"] end ```

To resolve MAR conditions without corrupting downstream ranking signals, quantitative researchers deploy two primary strategies: 1. **Generic Cross-REIT Models with Mean Imputation:** When training a unified model across the entire REIT universe, missing lease metrics for hotel REITs can be imputed using cross-sectional sector means. This forces hotel entities toward the center of the cross-sectional ranking distribution, preventing artificial extreme penalties while allowing data centers and commercial properties to differentiate at the top and bottom deciles based on real lease duration data. 2. **Sector-Specific Model Architectures:** Researchers segment the investment universe and build tailored models per sector, dropping irrelevant factors like lease duration entirely from the hotel model while retaining them in data center and commercial property pipelines.

[21:26](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=1286s) Missing Not at Random (MNAR) and Private Market Sourcing

Missing Not at Random (MNAR) represents the most complex missingness pattern, occurring when the probability of a value being missing depends directly on the unobserved value itself. A standard consumer example is household income survey responses, where high- or low-earning individuals disproportionately decline to disclose their earnings.

In institutional finance, MNAR is ubiquitous across private markets and unlisted companies. Unlike publicly traded equities subject to mandatory SEC filings and standardized disclosure regimes, private firms are under no regulatory obligation to publish operational metrics, revenue figures, or balance sheet details. Addressing this structural blind spot requires specialized data governance and statistical approximations: - **Rigorous Data Sourcing:** Primary data collection pipelines must verify provenance, quality, and accuracy before private market observations enter evaluation systems. - **Proxy and Propensity Score Analysis:** Researchers map private targets to comparable publicly traded peers with matching business profiles and operating characteristics, estimating unobserved features via propensity score matching and surrogate metrics while accounting for tracking error.

[24:07](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=1447s) Fairness, Look-Ahead Bias, and Large Language Models

Evaluating fairness and systemic bias in financial AI extends beyond demographic disparities to technical pitfalls like look-ahead bias. Financial research teams actively test Large Language Models (LLMs) for investment research, stock selection recommendations, and automated positioning strategies, but production portfolios cannot yet rely fully on direct LLM recommendations.

A critical roadblock is training cutoff contamination. Popular foundational LLMs are trained on web-scale crawls with knowledge cutoffs extending through late 2023 or mid-2024. Consequently, these models have already been exposed to the historical outperformance and financial results of leading market winners. If a generative model recommends buying Nvidia, quantitative researchers cannot easily disentangle whether the model is synthesizing forward-looking fundamentals and projecting genuine future cash flows, or simply regurgitating historical market outperformance embedded in its pretraining corpus.

[25:20](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=1520s) Defining Fairness and Representativeness in Financial Modeling

In finance, fairness means ensuring that algorithmic decisions and client services are inclusive, unbiased, and equitable across demographic groups and financial products. The foundation of fairness begins with evaluating data representativeness. Drawing a parallel to automated hiring systems, training or fine-tuning datasets must adequately represent groups across gender and socioeconomic lines while ignoring attributes irrelevant to performance. In recruiting, candidate skill sets should remain the sole discriminative factor; in financial distribution, models must balance exposure so that majority segments do not overshadow smaller groups.

```mermaid flowchart TD accTitle: Client Data Flow in Redemption Propensity Modeling subgraph DataCollection["Data Intake & Regional Profiling"] A["Client Activity & Trade History"] --> B{"Regional Distribution"} B -->|"Large Volume"| C["Major Hubs: UK, Germany, France"] B -->|"Small Volume"| D["Smaller Markets: Luxembourg, Italy"] end subgraph RiskMitigation["Propensity Modeling"] C --> E["Unified Redemption Propensity Model"] D --> E E --> F["Advisor Intervention: 6-12 Month Horizon"] end ```

The challenge of data representativeness frequently emerges in institutional distribution. Working with retail accounts—which in an asset management context refers to financial wirehouses and large institutions executing smaller transaction sizes rather than direct retail individuals—involves forecasting client churn. To help regional advisors intervene before assets leave, models predict redemption propensity across six- and twelve-month horizons. In the EMEA region, client concentration varies drastically: - Core markets like the United Kingdom, Germany, and France represent the vast majority of the client base. - Smaller jurisdictions such as Luxembourg and Italy contain relatively few accounts.

Training an undifferentiated, global model across all EMEA accounts causes the algorithm to skew toward dominant feature patterns from larger markets. When advisors in smaller countries attempt to apply these predictions locally, the model's accuracy deteriorates significantly.

---

[28:22](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=1702s) Strategies for Handling Data Imbalance and Ongoing Monitoring

Data science workflows focused on churn prediction, sales leads, upselling, or cross-selling inevitably confront data imbalance. Addressing regional and outcome disparities requires balancing statistical adjustments against the trade-offs they introduce:

- **Resampling Techniques:** Traditional approaches rely on oversampling minority groups or downsampling majority classes. Oversampling small groups often duplicates identical observations, providing little new information to the model and introducing artificial noise. - **Algorithm Selection:** Gradient-boosted decision trees, such as XGBoost, handle class imbalances better than standard classifiers out of the box. Alternatively, large language models (LLMs) can synthesize historical redemption behaviors into narrative client profiles. However, querying LLMs via external APIs introduces serious privacy considerations unless inference runs entirely on internal, on-premises GPU infrastructure. - **Cost-Sensitive Evaluation:** Assigning differential weights to errors based on financial impact aligns models with business realities. Losing a single client with substantial Assets Under Management (AUM) in a small market like Luxembourg can be far more damaging than losing a small-AUM account in a major market like Germany. Cost functions should weight potential redemptions by capital exposure rather than treating all account losses equally.

```mermaid flowchart LR accTitle: Dynamic Window Updating for Fairness Monitoring subgraph Stream["Incoming Market Data"] M1["Month 1"] --> M2["Month 2"] --> M3["Month 3"] end subgraph Windows["Monitoring Mechanisms"] W1["Expanding Window"] W2["Sliding Window"] end subgraph Governance["Production Model"] Stream --> Windows Windows --> G["Fairness & Drift Re-evaluation"] end ```

Because market conditions and investor behaviors shift rapidly in asset management, model reliability cannot rely on one-time validation. A framework that succeeds for a quarter may fail shortly thereafter. Ongoing fairness monitoring must avoid static assumptions, utilizing sliding or expanding windows to continuously integrate new market regimes and shifting demographic trends into downstream predictions.

---

[31:57](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=1917s) Core Pillars of Data Privacy in Financial Workflows

Data privacy in financial machine learning rests upon four foundational tenets: **anonymity** (preventing the identification of individuals within datasets), **confidentiality** (restricting data access strictly to authorized personnel), **robustness** (ensuring storage architectures withstand external breaches and adversarial attacks), and **unlinkability**. While cross-referencing multiple data feeds is standard practice for validating data accuracy, systems must guard against reverse-engineering, where disparate datasets are combined to deduce client identities.

To preserve privacy, asset management organizations implement varying levels of data transformation: - **Data Aggregation:** Direct client data is rarely passed to data science teams unfiltered. Private wealth divisions commonly aggregate personal details into coarse buckets, such as regional groupings or broad age bands (e.g., individuals under 30, or between 30 and 40), before sharing. - **Synthetic Data Generation:** When privacy regulations or strict internal policies prohibit direct analysis of sensitive records, teams can construct synthetic datasets that replicate multivariate statistical distributions without containing real client information. This technique mirrors academic practices in psychology and educational research, where complex student behaviors are modeled via multivariate simulations rather than exposing raw subject records. - **Differential Privacy (DP):** Mathematical privacy frameworks guarantee that the inclusion or omission of any single individual record does not noticeably alter the output distribution of a query or model.

---

[34:12](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=2052s) Differential Privacy and LLM Practicalities

Differential privacy generally operates across two primary paradigms:

| Mechanism | Operating Stage | Implementation Method | Practical Advantages & Trade-offs | |:--- |:--- |:--- |:--- | | **Output DP** | Post-processing | Injects calibrated noise into final analytical results or aggregate tables before sharing with collaborating teams. | Leaves underlying data readable for internal modeling; fails to protect prompt-level data sent to LLM APIs. | | **Training DP (DP-SGD)** | Model training | Injects calibrated noise directly into Stochastic Gradient Descent parameter updates during optimization. | Robustly limits training data memorization; requires significant GPU compute, slows convergence, and can degrade accuracy. |

In numerical modeling, DP algorithms provide formal privacy guarantees. For generative AI, output-level noise cannot prevent sensitive records from leaking if they were already included in prompt inputs or pre-training corpora. Fine-tuning models with Differentially Private Stochastic Gradient Descent (DP-SGD) prevents verbatim memorization, but it carries heavy overhead: extensive GPU resource consumption, sluggish convergence, and noticeable performance degradation.

```mermaid flowchart TD accTitle: Practical Privacy Pipeline for Large Language Models subgraph RawData["Raw Unstructured Text"] A["Client Disclosures & Meeting Notes"] end subgraph PreProcessing["Local Privacy Layer"] B["Lightweight NER Models"] C["Redaction & Masking: Names, Accounts, Locations"] A --> B --> C end subgraph LLMExecution["Secure Processing"] D["Sanitized Prompt Context"] E["Private Fine-Tuning via PEFT"] C --> D D --> E end ```

For practical LLM deployment, teams should emphasize two focused safeguards: 1. **Upfront Redaction and Entity Masking:** Run compact, local named-entity recognition (NER) models to strip out Personally Identifiable Information (PII)—including names, addresses, account numbers, and specific demographic details—before prompt ingestion. 2. **Parameter-Efficient Fine-Tuning (PEFT):** When domain adaptation is necessary, apply parameter-efficient methods instead of full-weight retraining to preserve localized controls while drastically reducing computational demands.

---

[37:18](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=2238s) The Red Pill vs. Blue Pill of AI Adoption

Closing with an analogy inspired by *The Matrix*, the path of modern AI adoption poses a fundamental choice between convenience and governance:

> "If you were given two pills, a blue pill is you can use AI at your convenience and the red pill will be you need to do AI responsibly and build the responsible feature before you see the consequence. What would you choose?"

A room poll revealed that while most practitioners raised their hands for the red pill of responsible, proactive safeguards, a surprising number admitted they would take the blue pill to deploy AI rapidly without friction. This tension underscores why responsible AI cannot remain an optional afterthought or external compliance check—it must be engineered directly into model architectures as a core functional feature from day one.

[38:04](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=2284s) Embedding Ethics by Design and Lessons from Geoffrey Hinton

Responsible AI cannot be treated as a mere compromise or a reluctant trade-off, nor should ethics be relegated to an afterthought or a reactive compliance checklist after systems are already deployed. Instead, ethical principles must be deliberately embedded into the system's foundational design from the very outset. Practitioners must actively reflect on ethical implications before collecting data and before writing code to build models, ensuring that AI objectives are deeply aligned with human values rather than evaluated strictly through narrow metrics of technical performance. While prioritizing raw speed and raw capability might yield short-term convenience and immediate performance gains, baking in responsible practices is essential over the long run to mitigate the potential for catastrophic consequences down the road.

This imperative is underscored by broader industry reflections. Yuyu Fan references a keynote earlier that morning where AI pioneer Geoffrey Hinton was asked about the ethical dimensions of artificial intelligence. When asked what single thing he would alter about his journey in the past if given the chance, Hinton confessed that his only regret was not thinking deeply about the ethical ramifications of AI much earlier in his career. Closing on this cautionary note, Fan concludes the presentation and opens the floor to the audience for questions.

- **Proactive Alignment over Post-Hoc Compliance:** AI objectives must harmonize with human values before data acquisition and model development begin, rather than patching ethical issues downstream. - **Short-Term Gains vs. Long-Term Hazards:** Sacrificing ethical oversight for immediate technical performance or deployment convenience heightens the risk of massive, systemic consequences over time. - **Geoffrey Hinton's Reflection:** When reflecting on his life's work, Hinton highlighted that the one thing he wished he could change was considering the ethical side of AI at a far earlier stage.

## Notable quotes > [01:44](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=104s) fixing the fences after the sheep have been lost — Yuyu Fan

> [04:55](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=295s) the AI made the decision — Yuyu Fan

> [04:55](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=295s) Two things fill the mind with ever new and increasing admiration and awe... the starry heavens above me and the moral law within me — Immanuel Kant

> [37:18](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=2238s) If you were given two pills, a blue pill is you can use AI at your convenience and the red pill will be you need to do AI responsibly and build the responsible feature before you see the consequence. What would you choose? — Yuyu Fan

## Mentioned AllianceBernstein, Ai4, Yuyu Fan, Geoffrey Hinton, Waymo, EU AI Act, GDPR, Immanuel Kant, Russell 1000, S&P 500, Nvidia, The Matrix, XGBoost, SHAP, PEFT

## Video description Yuyu Fan, Principal Data Scientist, AllianceBernstein

Abstracts

Ensuring responsible AI practices is essential in financial asset management due to the significant impact AI-driven decisions can have on markets and individual financial outcomes. Typical challenges include biases in datasets, lack of transparency, and limited interpretability of AI models. Numerous solutions exist to address these concerns. This talk focuses particularly on data-driven approaches and highlight key data-centric solutions, including bias detection through algorithmic audits and fairness metrics, improved transparency via rigorous data governance and model documentation, enhanced interpretability using explainable AI methods, and robust, risk-aware modeling practices such as scenario analysis and AI stress testing.

[Source](https://www.youtube.com/watch?v=mMSw4PqtPhM)

中文简报

联博要求推行数据层审计以防范AI模型漂移 资产管理机构必须在训练前将验证、公平性指标和隐私保护措施直接嵌入数据摄取管道,因为事后合规无法防范前瞻偏差或造成代价高昂的资本错配。 结合一家管理规模超过8000亿美元的资产管理公司的运营实践,Yuyu Fan指出,负责任AI必须直接在底层数据层进行工程化构建,而不能被视为事后补充。该演讲提供了在市场机制转换、摄取延迟以及复杂缺失机制(MCAR、MAR、MNAR)下保障数据质量的具体方法。Fan还进一步探讨了金融模型中数据不平衡和前瞻偏差的切实缓解方案,以及涵盖差分隐私到大语言模型(LLM)部署前置PII脱敏等数据隐私策略。最后,她强调,长期的企业信任要求从系统设计之初就融入伦理管理与问责机制。 量化资产管理中的负责任AI必须建立在以数据为中心的基础统计实践之上,而非被视作被动的事后合规检查清单。 (0:04) 未能落实前瞻性的AI防护措施会导致严重的系统性风险,涵盖从高管深度伪造欺诈到自动化筛选流程中的算法偏见。 (1:44) 负责任的金融AI需要具备机构层面的问责制和可审计性,这意味着当资本配置或交易失败时,资产管理机构不能将责任推诿给自动化系统。 (4:55) 稳健的数据验证管道在数据进入生产端Alpha模型之前,结合了统计基准指标、无监督异常检测(如孤立森林)以及二级参考数据交叉核验。 (10:52) 摄取延迟存在的巨大差距——例如美股记录仅需20至30分钟,而新兴市场记录滞后长达两个月——在定期投资组合再平衡期间构成了重大的基本面风险。 (15:01)

Reading summary

Yuyu Fan, Principal Data Scientist at AllianceBernstein, argues that responsible artificial intelligence cannot rely on post-hoc compliance or generative model hype, but must be built on proactive, data-centric engineering across quality, fairness, and privacy. Accountability and Systemic Risks in Financial AI (1:44) Failing to implement AI responsibly exposes financial institutions to systemic crises of trust. The proliferation of executive deepfakes enables corporate fraud, while AI-driven cryptocurrency scams surged by more than 400% between June and April. Unchecked algorithmic bias in historical data can also perpetuate discrimination in credit and resume screening. Fan cautions that institutions must intervene at the data layer to avoid trying to fix fences after the sheep are lost. Institutional accountability cannot be evaded by treating models as autonomous black boxes. Drawing a parallel to liability disputes surrounding autonomous vehicles like Waymo, asset managers cannot excuse portfolio failures or erroneous allocations by claiming an algorithm made the choice. Compliance with frameworks like the EU AI Act and GDPR provides a baseline, but practitioners must exercise ethical stewardship to ensure systems cause no harm. Quality Validation, Ingestion Latency, and Anomaly Detection (10:52) Because financial markets are notoriously noisy and sparse in genuine alpha signals, data quality requires multi-tiered validation. Automated pipelines must continuously track descriptive statistics, deploy unsupervised anomaly detection such as Isolation Forests and Interquartile Range thresholds, and cross-reference internal records against independent reference datasets. Because non-stationary time series can generate spurious correlations, stationarity testing and data-drift tracking—such as detecting abnormal drops in ingested news volumes—are critical prior to model training. Operational performance also depends on information latency. In US equities, Russell 1000 earnings call transcripts arrive in databases within 20 to 30 minutes of call completion, whereas emerging market disclosures can lag by up to two months. Sourcing stale information introduces significant positioning risks during periodic portfolio rebalancing. Extracted unstructured signals must undergo both historical backtesting across market regimes and out-of-sample forward paper trading before live deployment. Mathematical Approaches to Missing Financial Data (17:39) Handling missing data requires diagnosing the underlying mathematical mechanism rather than applying arbitrary imputation. Missing Completely at Random (MCAR) patterns appear in historical earnings call archives prior to 2008 due to legacy technology limitations rather than corporate traits. To preserve statistical integrity, NLP signal generation pipelines deliberately restrict analysis to 2010 onward. Missing at Random (MAR) emerges when data absence relates to observed attributes. In real estate investment trust (REIT) factor modeling, hotel REITs inherently lack average lease term metrics common to commercial or data center properties. Practitioners address MAR either by imputing cross-sectional sector means to position hotels neutrally in factor rankings or by constructing sector-specific model architectures. Conversely, Missing Not at Random (MNAR) pervades unlisted private markets where disclosures are non-mandatory; addressing this requires rigorous provenance verification and propensity score matching to pair private entities with comparable public peers. Fairness, Look-Ahead Contamination, and Class Imbalance (24:07) Fairness in quantitative finance includes eliminating technical flaws like look-ahead bias. LLMs trained on web data with cutoffs in late 2023 or mid-2024 have already ingested the historical outperformance of market leaders like Nvidia. Researchers cannot easily verify whether an LLM's stock recommendation stems from genuine forward-looking analysis or retroactive pretraining data contamination. Fairness also requires balanced demographic and regional representation. In institutional distribution, training a single European redemption propensity model skews predictions toward high-volume markets like the UK, Germany, and France, deteriorating accuracy when applied in smaller jurisdictions like Luxembourg or Italy. To handle severe class imbalances without generating noisy duplicate records through oversampling, teams utilize gradient-boosted decision trees, dynamic sliding or expanding monitoring windows, and cost-sensitive evaluation functions that weight prediction errors by capital exposure (AUM) rather than raw account counts. Privacy Frameworks and Practical LLM Safeguards (31:57) Financial data privacy hinges on anonymity, confidentiality, robustness, and unlinkability to prevent adversaries from reverse-engineering client identities across cross-referenced datasets. While firms frequently use data aggregation and multivariate synthetic data simulations, mathematical frameworks like differential privacy (DP) present clear operational trade-offs. Differentially private stochastic gradient descent (DP-SGD) stops LLMs from memorizing private training data, but it demands heavy GPU compute, slows optimization convergence, and degrades overall model accuracy. Output-level noise injections similarly fail to protect sensitive text transmitted directly into generative prompts. Consequently, practical LLM deployments prioritize localized pre-processing defenses: running lightweight on-premises Named Entity Recognition (NER) models to redact personally identifiable information (PII) before ingestion, combined with parameter-efficient fine-tuning (PEFT) to adapt models without modifying entire base weights. Citing an audience poll where many practitioners admitted they would take the convenient 'blue pill' of friction-free AI deployment over proactive governance, Fan emphasizes that ethics cannot remain an afterthought or a reactive compliance checklist. Recalling Geoffrey Hinton's reflection that his primary career regret was not contemplating the ethical ramifications of AI earlier, Fan concludes that asset managers must design responsible constraints into foundational data pipelines before collecting data or building models.

精炼阅读摘要

联博集团(AllianceBernstein)主任数据科学家范宇宇(Yuyu Fan)指出,构建负责任的人工智能不能仅依赖后验的合规检查,而必须从底层数据治理切入。在管理逾8000亿美元资产的实践中,她主张将数据质量、公平性与隐私保护设计为模型工程的核心内生属性,以抵御深度伪造诈骗、算法偏见与前瞻偏差等系统性风险。 负责任AI核心支柱与金融信任危机 (1:44) 范宇宇强调,忽视负责任AI将引发波及深远的信任危机与系统性危害。在金融行业,深度伪造(deepfake)技术已被用于冒充高管实施高危企业诈骗,而AI驱动的加密货币骗局在十个月内(6月至次年4月)激增超400%。此外,基于历史招聘记录训练的算法容易固化对特定性别或非传统背景候选人的偏见。面对失控风险,机构必须在基础数据层展开前瞻性治理。 在资产管理实践中,负责任AI依托七大核心支柱展开:数据质量、公平性、隐私与安全、透明度与可解释性、可审计性与问责制、监管合规,以及超越法规条框的“不作恶”道德准则。范宇宇援引自动驾驶车辆(如Waymo)面临的事故责任归属难题指出,资产管理机构在投资或资金分配受损时,绝不能以“模型自行决策”为由推卸责任。机构除严格遵循欧盟《人工智能法案》与GDPR外,更须建立从原始特征转换直至最终预测的完整审计追踪链条。 数据质量验证与高噪声时间序列治理 (10:52) 金融数据具有高噪声且阿尔法(alpha)信号稀缺的特征。联博集团通过自动化流水线保障数据保真度,流程涵盖基础描述性统计(均值、方差、四分位距IQR)、基于孤立森林(Isolation Forest)的无监督多变量异常检测,以及监督分类器和少样本LLM验证,最后结合独立二级参考数据集进行交叉比对核验。 金融时间序列的有效性高度依赖平稳性与持续监控。市场机制漂移常导致数据分布突变,例如新闻摄入量自每日10000篇骤降至5000篇时,系统需自动排查属于正常节假日还是上游交付故障。同时,数据新鲜度对投资组合重平衡构成重大影响:美股(如罗素1000成分股)财报电话会议文本通常在会后20至30分钟内入库,而新兴市场数据可能滞后长达两个月;依赖陈旧披露进行调仓将为投资组合带来极高的非预期持仓风险。 缺失数据机制与资产管理应对策略 (17:39) 金融场景中盲目进行数据填补会导致严重偏差,量化团队须根据其数学机理分类治理。完全随机缺失(MCAR)常见于历史归档不全,例如2008年以前标普500与罗素1000财报电话会议文本缺乏系统数字化归档,此类缺失与公司质地无关,因此NLP回测流水线统一起始于2010年,以保证样本池覆盖一致。 随机缺失(MAR)与已观测特征系统性相关。例如在房地产信托(REITs)因子模型中,“平均租期”在酒店类REITs中近乎全无,而在数据中心与写字楼中具备长期合约。团队采取两种应对架构:或在全市场统一模型中对酒店行业填充截面均值,使其在横截面排序中处于中位而不受极端惩罚;或建立分行业模型,在酒店流水线中剔除该特征。针对非随机缺失(MNAR),如缺乏法定义务披露财报的非上市私募股权市场,团队则结合数据溯源、公开同业对标以及倾向评分匹配(Propensity Score Matching)构建代理指标。 公平性衡量、前瞻偏差与客户流失预测 (24:07) 金融AI的公平性不仅关乎人口统计学代表性,还涉及算法的技术性缺陷。当研究人员测试将大语言模型用于选股与策略建议时,普遍遭遇知识截止期带来的前瞻偏差(look-ahead bias)。商业基础模型的预训练数据已包含2023年末或2024年中的市场行情,当模型推荐英伟达(Nvidia)等股票时,量化团队无法验证其是推演出了前瞻阿尔法,还是单纯复读了预训练语料中的历史超额表现。 在分销渠道业务中,机构常预测客户未来6至12个月的赎回倾向以提前介入干预。然而,EMEA地区客户高度集中于英国、德国与法国,卢森堡与意大利等小市场账户极少。若训练无差别的全局模型,算法将被大市场特征主导。为此,团队采用成本敏感型评估(Cost-Sensitive Evaluation),按资金规模(AUM)赋予赎回损失不同权重——流失卢森堡的一个高资产账户对业务的打击远大于德国的小客户,并利用滑动或扩展时间窗口动态监测漂移。 数据隐私机制与大语言模型安全实践 (31:57) 金融机器学习的数据隐私建立在匿名性、保密性、稳健性与不可链接性四大支柱之上,严防通过多源数据交叉比对反向推断客户身份。在私人财富管理场景中,团队常采用粗粒化聚合(如按区域或年龄段分桶)以及合成数据生成技术,模拟多变量分布以规避敏感记录泄露。 针对差分隐私(DP),范宇宇指出输出端加噪无法防御提示词泄露,而在训练阶段应用差分隐私随机梯度下降(DP-SGD)会消耗极高GPU算力并导致模型收敛缓慢、精度显著下滑。在工程实务中,针对大语言模型的落地应侧重两项实用举措:一是部署本地轻量级命名实体识别(NER)模型,在将文本输入Prompt前抹除姓名、账号与地址等个人身份信息(PII);二是在领域微调时优先采用参数高效微调(PEFT),在维持本地受控的同时大幅缩减算力消耗。 在模型部署便捷性与严谨治理的权衡中,范宇宇以《黑客帝国》红蓝药丸为喻,强调负责任AI绝不能沦为事后合规检查。她引述深度学习先驱杰弗里·辛顿(Geoffrey Hinton)的反思——其职业生涯唯一遗憾即未能在早期深刻审视AI的伦理后果。资产管理机构若仅追求短期交付速度而牺牲伦理设计,长期必将积聚灾难性系统风险;机构必须在采集数据与编写第一行代码前,将伦理准则主动嵌入系统架构设计中。

Detailed notes — zh

## Background 该视频由 YouTube 频道 Ai4 于 2025 年 8 月 27 日发布,主讲人为联博基金(AllianceBernstein)首席数据科学家 Yuyu Fan。视频简介指出,本次演讲聚焦于金融资产管理领域的负责任 AI 数据实践,重点探讨如何通过算法审计与公平性指标进行偏差检测、借助严格的数据治理提升透明度与可解释性,并利用差分隐私与前置伦理设计化解数据层面的风险。 ## TL;DR 联博基金首席数据科学家 Yuyu Fan 结合其管理超 8000 亿美元资产的实战经验,系统阐述了在金融资产管理中构建负责任 AI 的数据核心方法。演讲深入剖析了数据质量验证、时间序列漂移监控、三类数据缺失机制(MCAR/MAR/MNAR)的处理策略,并警示了大模型在投研回测中的前视偏差。此外,主讲人针对 EMEA 客户赎回预测中的地理代表性失衡提出加权对策,详解了差分隐私与大模型脱敏分析等隐私保护路径,呼吁从业者必须将伦理与责任作为底层系统特性前置构建,而非事后补救。 ## Atmosphere & style 整场演讲兼具资深量化实战专家的严谨务实与学者式的深度思辨,主讲人以清晰从容的节奏娓娓道来。她将硬核的统计学算法、多模态金融数据清洗与康德道德法则、《黑客帝国》红蓝药丸现场互动及 Geoffrey Hinton 的反思巧妙串联,现场既有对黑产欺诈与模型偏差的冷静警示,又有引发全场共鸣的伦理叩问,观感扎实、深刻且富有启发性。 ## Key takeaways - [00:04](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=4s) 在生成式 AI 风靡的背景下,经典统计与机器学习方法依然是从底层数据层面筑牢负责任 AI(Responsible AI)不可或缺的基石。 - [02:15](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=135s) 不负责任的 AI 构建不仅会引发深伪欺诈、加密骗局暴增等恶意安全风险,还可能因历史数据代表性缺失而无意中放大算法偏见与不公。 - [04:55](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=295s) 金融 AI 治理体系由数据质量、公平性、隐私安全、透明度、可解释性、审计问责及监管合规等多维支柱构成,核心底线是恪守“不作恶”的道德法则。 - [10:52](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=652s) 数据质量验证是防御的第一步,需结合 IQR 统计规则、孤立森林无监督算法、监督分类及多源交叉校验来构建完善的异常检测流水线。 - [13:17](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=797s) 金融时间序列受宏观与市场体制漂移影响显著,必须建立自动化的持续验证机制与数据吞吐容量异动监控以防信号失真。 - [15:01](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=901s) 金融数据存在极低信噪比与时效性差异,需要借助 GPU 算力进行实体标注与情感清洗,并通过历史回测与前向模拟交易双重验证信号质量。 - [16:27](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=987s) 处理缺失数据需区分完全随机缺失(MCAR)、随机缺失(MAR)和非随机缺失(MNAR);针对 MNAR(如一级市场未披露财务)严禁简单均值填充,需结合代理变量分析。 - [24:07](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=1447s) 大语言模型的预训练语料天然包含了资产的历史表现,会引入严重的前视偏差(Look-Ahead Bias),因此当前投研严禁在未剔除该偏差前使用大模型做全自动投资决策。 - [25:20](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=1520s) 保障算法公平性需要检验训练数据的地理与群体代表性,并针对类别不平衡问题采用重采样、鲁棒算法(如 XGBoost)或基于业务 AUM 损失的代价加权机制。 - [31:57](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=1917s) 数据隐私保护依托匿名性、机密性、稳健性与不可关联性四大属性,可通过数据聚合与合成数据模拟来平衡合规要求与研究需求。 - [34:12](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=2052s) 差分隐私(DP)在大语言模型落地中面临输入侧敏感暴露与高算力开销问题,实际工程中应优先结合轻量级脱敏(Redaction)与参数高效微调(PEFT)。 - [38:04](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=2284s) 负责任 AI 绝非事后打补丁或对性能的被迫妥协,而必须在系统设计之初就将伦理内嵌为核心功能,实现 AI 目标与人类价值观的深度对齐。 ## Detailed walkthrough ### [00:04](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=4s) 讲者背景与负责任 AI 的基石 来自联博基金(AllianceBernstein,简称 AB)的首席数据科学家 Yuyu Fan 进行了自我介绍。联博是一家资产管理规模超过 8000 亿美元的资产管理公司。Yuyu 属于公司的中心化数据科学团队,这使她有机会与公司内部的不同业务部门紧密合作——涵盖投资端(如生成投资信号)、分销与销售端(如为客户拓展挖掘潜在销售线索),以及日常运营端。这种多维度的跨部门合作让她虽然身处技术研发序列,却深入了解业务一线的实际痛点。 本次演讲聚焦于负责任 AI(Responsible AI)的数据实践,尤其是探讨如何利用统计指标和度量手段,从底层数据层面夯实负责任 AI 的基础。Yuyu 指出,如今提起“统计机器学习”,在生成式 AI 风靡的当下听起来似乎有些过时,但 AI 绝不仅仅等同于生成式 AI;过去三十年间成熟发展的各种经典统计与机器学习技术,依然是解决当今复杂问题不可或缺的组件。 在早上的大会发言中,图灵奖得主杰弗里·辛顿(Geoffrey Hinton)曾提醒大家:当 AI 变得比人类更聪明、更强大时,我们必须确保在构建系统时,让 AI 具备“关怀人类”(care about us)的内在属性。Yuyu 强调,从数据和算法底层负责任地构建 AI,正是将这种关怀机制深度融入系统的根基所在。 - 资产管理规模:联博管理资产逾 8000 亿美元($800+ Billion AUM)。 - 业务跨度:涵盖量化投资信号挖掘、分销销售线索匹配以及中后台运营自动化。 - 核心理念:不仅紧跟生成式 AI 潮流,更强调统计机器学习等经典方法在底层数据治理中的长期价值。 --- ### [02:15](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=135s) AI 风险与信任危机:深伪欺诈、加密骗局与偏见 如果不负责任地构建 AI,究竟会引发哪些恶劣后果?Yuyu 结合金融行业的具体案例进行了剖析。去年,深度伪造(Deepfakes)技术被用于冒充高管实施诈骗。这不仅对账户资金造成直接的财务风险,更引发了深层次的“信任危机”——当人们收到一份市场分析报告或通知消息时,已无法分清这是来自人类专家的可靠建议,还是 AI 编造且充满隐患的信息。 AI 带来的危害绝不仅限于高管和大型金融机构,普通大众同样深受其害。从去年 6 月到今年 4 月,由 AI 助推的加密货币骗局暴增了 400% 以上。AI 极大地提高了日常工作与生活的效率,但与此同时,黑产团伙也利用 AI 极快地生成和分发欺诈话术,放大了恶意行为的杀伤力。 除了主动的恶意行为,AI 即使出发点良好,也可能在无意中造成严重损害。例如,用于招聘初筛的 AI 模型如果是基于历史招聘数据训练的,可能会系统性地偏好某些特定的人名或背景。这种偏见往往源于历史数据本身的代表性缺陷(如性别比例失衡、特定职级或过往经历分布不均),从而在算法决策中制造出本不应存在的不平等。面对这些危害,不能等到“亡羊补牢,为时已晚”(fix the fences after the sheep has been lost),而必须从最基础的数据阶段筑牢防线。 - 加密欺诈暴增:从去年 6 月到今年 4 月,由 AI 驱动的加密诈骗案件攀升超 400%。 - 双重风险类型:一类是黑客冒充高管、实施金融诈骗等恶意利用;另一类是源于历史数据失真的隐性偏见(如招聘筛选偏差)。 --- ### [04:55](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=295s) 金融领域负责任 AI 的核心要素体系 在金融领域构建负责任的 AI 系统时,通常需要综合权衡多个核心支柱。数据质量首当其冲,它涵盖了数据的准确性、可靠性、时效性、完整性,以及信噪比。Yuyu 特别强调,金融领域的数据信噪比(Signal-to-Noise Ratio)极低,虽然每日涌入海量市场与交易数据,但想从中淘洗出真正对投资决策有信息增量的高质量数据异常艰难。 公平性与隐私保护构成了另外两个关键支柱。以岗位简历初筛为例,输入训练模型的数据必须在不同群体间保持均衡公平。而在分销端,由于频繁接触海量敏感的机构与个人客户资料,数据保密与安全防护是不可触碰的红线。透明度与可解释性紧密相连:透明度要求团队能够全面掌控数据,并在决策流中清晰追溯数据的使用链路;而可解释性绝非仅限于模型层面的 SHAP(Shapley Additive Explanations)等可解释性归因算法,它同样起源于数据,必须能清晰追溯到具体的特征输入如何直接促成了输出结果。 审计性(Auditability)与问责制(Accountability)在处理巨额资金流动的金融市场中具有决定性意义。正如自动驾驶汽车(如 Waymo)虽在西海岸极为流行,但走向全国范围时仍面临法律归责难题:一旦发生严重事故,究竟谁来承担法律责任?金融交易同样如此,大额资金往来绝不能用一句轻飘飘的“这是 AI 决定的”来推卸责任。此外,网络安全、监管合规(如欧盟严格界定 AI 风险等级的《人工智能法案》以及各项数据保护条例)也是底层不可逾越的红线。 在列举了诸多客观标准后,Yuyu 引用了哲学家康德的名言——“有两样东西,我们愈经常愈持久地加以思索,它们就愈使心灵充满日新月异、有加无已的景仰和敬畏:在我之上的星空和居我心中的道德法则。”她呼吁从业者不仅要遵守写在纸面上的规章制度,更要依赖内心的良知与道德自律,在操作数据和构建模型时时刻警惕对弱势群体可能带来的隐性伤害,真正践行“不作恶”(Do No Harm)。 ```mermaid flowchart TD accTitle: 负责任 AI 核心治理框架 accDescr: 展示保障负责任 AI 的多维支柱体系,涵盖数据质量、可解释性、合规以及道德原则。 subgraph DataFoundation["数据基石"] Q["数据质量<br/>(高信噪比/准确性/时效性)"] F["公平性<br/>(无群体偏见)"] P["隐私与安全<br/>(客户敏感信息保护)"] end subgraph TrustAndGovernance["信任与治理体系"] T["透明度与可解释性<br/>(数据全链路可溯源)"] A["审计性与问责制<br/>(责任归属与合规)"] R["监管与法遵<br/>(EU AI Act 等)"] end subgraph EthicalAnchor["道德底线"] M["不作恶 (Do No Harm)<br/>心中的道德法则"] end DataFoundation --> TrustAndGovernance TrustAndGovernance --> EthicalAnchor ``` - 信噪比挑战:金融市场原始数据量庞大,但有效投资信号稀疏,筛选难度极高。 - 问责硬核底线:面对资产损失或违规,必须落实具体责任主体,严禁“算法甩锅”。 - 监管红线:《欧盟人工智能法案》(EU AI Act)等法规严格限制了训练数据类别并对系统危害等级进行了严格划分。 --- ### [10:52](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=652s) 纵深防御第一步:数据质量验证与异常检测 确立了宏观原则后,Yuyu 将重心聚焦在三大支柱的数据实操方案上:数据质量、公平性与隐私保护。无论团队是自行从头训练模型,还是直接调用成熟的现成开源模型与商用 API,数据都是不可逾越的第一步,必须首先确保输入数据的真实准确并贴合业务初衷。 保障数据质量的基础是构建严密的数据验证流水线(Data Validation Pipeline)。这从最直观的描述性统计检查开始,包括计算均值、方差及各种分布统计量,快速判断数据形态是否合理。随后进入核心的异常检测(Anomaly Detection)阶段。对于简单的离群点,可以直接利用四分位距(IQR,Interquartile Range)等统计学规则,将处于分布边缘极端位置的点识别出来。 面对无标注的复杂场景,可以引入孤立森林(Isolation Forest)等无监督机器学习算法,通过在特征分布空间中度量样本点与主样本群的疏离程度,高效剥离离群点。而当拥有历史标注数据时,则可训练专门的监督分类模型,甚至利用大语言模型(LLM)进行少样本提示(Few-shot prompting),识别具有欺诈或错配特征的样本。Yuyu 在联博内部正是通过构建这类账户异常检测系统,有力保障了客户交易与多元属性数据的合规与稳健。此外,利用多源数据集进行跨参考交叉核验(Cross-referencing check),也是验证投资与客户数据真实性不可或缺的兜底手段。 - 数据验证基线:计算均值、方差、偏度等分布统计,设置基础监控规则。 - 统计级离群点排查:采用四分位距(IQR)等描述性统计方法圈定边缘极端值。 - 高维无监督识别:使用孤立森林(Isolation Forest)在多维特征空间中自动隔离稀疏点。 - 监督分类与 LLM 结合:结合标注样本训练异常检测分类器,或借助 LLM 的少样本推理能力捕获复杂异常模式。 - 多源交叉比对:利用多套相互独立的客户及投资交易数据库进行交叉校验,杜绝单一数据源故障风险。 ### [13:17](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=797s) 数据可靠性与时间序列漂移监测 在金融领域,数据不仅要在单点时间保持准确,更必须在时间跨度上保持长期的可靠性(Reliability)。金融分析重度依赖时间序列数据,许多从业者往往在初始校验通过后便将数据置于一旁,误以为系统会永远正常运转,但现实并非如此。市场环境瞬息万变,不同的市场体制(Regimes)与宏观条件会导致数据分布发生明显的漂移(Data Shifts & Drifts)。因此,构建自动化的数据验证流水线并持续监测其时间序列稳定性至关重要。 除了金融时间序列特有的平稳性检验(Stationary Check)以及底层的弹性技术架构保障外,数据量的异动监测也是关键防线。例如在处理金融新闻文本数据时,团队需要严密监控每日接入的文本总量。如果系统昨天接收了 10,000 篇新闻,而今天突然骤降至 5,000 篇,数据科学家就必须立刻排查原因:这究竟是周末或节假日的正常市场交易清淡所致,还是上游数据源的数据管道发生了故障。 - **动态监控机制**:持续追踪时间序列指标,防止因市场体制切换(Regime Shifts)导致投资信号失真。 - **容量异动警报**:通过基准数据量(如日均 10,000 篇新闻)监测数据流断流或采集缺失异常。 --- ### [15:01](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=901s) 数据及时性与信噪比(SNR)清洗 数据的及时性(Timeliness)直接决定了量化策略与投资组合构建的成败。在日内高频交易中,毫秒级的数据延迟都会产生致命影响;而在基本面量化中,数据团队会计算“新鲜度评分”(Freshness Scores)以监控数据是否按预期频率交付。以财报电话会议(Earnings Calls)文本为例,美股标普 500 或罗素 1000 指数覆盖的大型上市公司数据非常及时,通常在电话会议结束后 20 到 30 分钟内即可结构化流式写入数据库;然而在新兴市场,一份财报电话会议记录可能在两个月后才提供第一版数据。如果投资组合下周一要进行再平衡调仓,而参考的数据依然停留在去年的旧记录,其指导意义将荡然无存。 与此同时,金融数据(涵盖文本、音频、卫星图像、蜂窝移动流量等替代数据)普遍面临极低的信噪比(Signal-to-Noise Ratio),需要极其繁重的数据清洗与实体标注工作。以海量新闻为例,要准确识别新闻中的实体公司(Tagging)、提取核心主题并计算特定公司在特定主题下的情感倾向,这在面对数百万级别的新闻库时不仅逻辑复杂,而且极度消耗 GPU 算力。为了验证清洗后的信号质量,金融工程主要依赖两类手段:利用历史数据回溯测试(Backtesting)发掘潜在投资信号,以及通过模拟盘/前向纸面交易(Forward Testing / Simulation)评估真实市场表现。 ```mermaid flowchart LR accTitle: 金融数据处理与验证流水线 subgraph S1["数据摄取与清洗"] A["多模态/文本数据"] --> B["GPU实体标注与情感解析"] B --> C["新鲜度与时效校验"] end subgraph S2["信号评估"] C --> D["历史回测 Backtesting"] D --> E["前向模拟 Simulation"] end ``` - **时效性差异**:成熟市场(如美股)财报会议记录 20~30 分钟即可入库,而新兴市场数据可能滞后数月。 - **信噪比提纯**:利用 GPU 加速对百万级非结构化文本进行实体(Entity)、主题(Topic)与情感(Sentiment)清洗打标。 - **双重验证机制**:通过历史回测发掘 Alpha 信号,结合前向纸面模拟测试(Paper Testing)防范过拟合。 --- ### [16:27](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=987s) 缺失数据模式(一):完全随机缺失与随机缺失 在真实世界的金融统计与建模中,缺失数据(Missing Data)普遍存在且形态各异。第一种模式是**完全随机缺失(MCAR, Missing Completely at Random)**,即数据的缺失与缺失属性本身无关,纯粹受制于历史技术限制或客观归档条件。例如,2008 年以前全市场的财报电话会议文本并未建立系统性的数字化归档,虽然偶尔能采集到零星样本,但无法完整覆盖标普 500 或罗素 1000 成分股。这种缺失与公司本身的质地或行业毫无关联,仅仅是当时的数据基础设施限制。因此在进行量化回测或信号生成时,严谨的做法是将样本起始时间设定在数据覆盖度完善的 2010 年之后,以确保统计证据的有效性。 第二种模式是**随机缺失(MAR, Missing at Random)**,其缺失机制与数据集中其他可观测的特征或行业属性直接相关。在对房地产投资信托基金(REITs)进行选股与组合构建时,模型因子中常包含“平均租约期限”(Average Leasing Terms)。数据清洗发现该特征在酒店类 REITs 中大面积缺失,这是由商业模式决定的:酒店住客通常仅停留数天或一两晚,天然不存在像住宅租赁或数据中心那样数年维度的长期租约。 针对此类随机缺失,业界主要有两种建模应对策略: ```mermaid flowchart TD accTitle: 随机缺失 MAR 的两种建模处理方案 A["REITs 特征缺失: 租约期限"] --> B{"建模架构选择"} B -->|"全行业通用模型"| C["截面均值填充 Cross-sectional Mean"] C --> D["酒店类标的居中,保留有效特征极值区分度"] B -->|"行业专用模型"| E["分行业建模 Sector-Specific"] E --> F["酒店模型直接剔除租约特征,数据中心等保留"] ``` - **通用模型与截面均值填充**:若训练覆盖全体 REITs 的全局模型,可使用截面均值对酒店行业缺失值进行插补。均值填充使得酒店标的在租约维度的打分居中,从而让具备真实长期租约特征的数据中心或商业地产在头部或尾部充分发挥选股区分度。 - **行业专用模型(Sector-Specific Models)**:针对酒店行业单独建模并直接剔除租约期限特征,而对数据中心、商业写字楼等行业模型则保留该高价值特征。 --- ### [21:26](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=1286s) 缺失数据模式(二):非随机缺失与一级市场代理估算 第三种也是最具挑战性的模式是**非随机缺失(MNAR, Missing Not at Random)**,即数据的缺失直接取决于该变量本身的未观测值。一个生活中的典型案例是人口统计问卷中的家庭收入调查——许多受访者选择不填报收入,正是因为个人倾向于向不熟悉的机构隐瞒高额或敏感的财务隐私,缺失本身就代表了特定状态。 在金融投资中,非随机缺失最为集中的领域是非上市的一级市场私募股权与未上市公司(Private Companies)。相比于信息披露透明的上市公司,非上市公司受法规保护无需公开发布财务报表,导致核心财务指标大面积缺失。若要对未上市公司进行分析,数据溯源与数据质量控制是重中之重。量化团队通常采用**代理变量分析法(Proxy Analysis)**(例如倾向得分匹配分析 Propensity Score Analysis)寻找与目标非上市公司在行业、体量和业务画像上高度相似的上市公司作为估算锚点,以推导其财务特征。但由于非随机缺失机制的存在,这类代理估计依然存在局限,绝不能简单地用全局均值粗暴填充,否则将导致估值模型产生严重偏差。 - **非随机缺失本质**:缺失状态由变量本身的数值驱动(如高净值人群隐瞒收入、非上市公司依法不披露财务)。 - **代理分析机制**:借助倾向得分分析等估值对标手段,在公开市场寻找画像相似的上市公司作为代理变量(Surrogate)。 - **严禁盲目均值填充**:对 MNAR 数据直接计算均值插补会严重扭曲样本分布并带来系统性偏差。 --- ### [24:07](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=1447s) 金融 AI 中的前视偏差与大语言模型局限 在金融数据分析与 AI 建模中,数据偏差无处不在,其中危害极大的是**前视偏差(Look-Ahead Bias)**。当前投资机构正积极探索将大语言模型(LLM)引入投研体系,用于股票推荐或仓位交易行为的辅助分析,但目前绝不会构建完全依赖大语言模型决策的自主投资组合,核心原因之一就是前视偏差的污染。 目前市面主流大模型的训练数据截止时间(Training Cutoff)通常在 2023 年底或 2024 年中,这意味着大模型在预训练和微调阶段已经在互联网语料中“提前见证”了相关公司在过去几年的实际财务爆发与优异表现。 > “如果 ChatGPT 给出买入英伟达(NVIDIA)的推荐,我们根本无法判断它究竟是因为能精准预测英伟达未来的真实自由现金流,还是仅仅因为模型在训练语料中早就‘知道’了英伟达近年来股价表现极其出色。” - **前视偏差根源**:LLM 预训练语料涵盖了资产在历史回测区间内的实际市场表现与新闻,形成天然的信息泄露(Data Leakage)。 - **投研落地边界**:大模型当前主要用于辅助生成研究灵感与文本挖掘,严禁在未剔除前视偏差的情况下将其作为全自动投资决策的依据。 ### [25:20](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=1520s) 金融 AI 中的公平性与数据代表性 在金融资产管理领域,公平性(Fairness)的核心在于确保所有金融决策与服务都是包容、无偏见且公平合理的,无论客户属于哪一群体或购买哪类产品。为了在模型构建中贯彻公平原则,首要任务是检验训练与微调数据的代表性(Representativeness)。例如在招聘筛选模型中,必须剔除性别、社会经济地位等与业务决策无关的特征,仅保留与岗位要求相关的技能特征。 ```mermaid flowchart TD accTitle: EMEA Client Redemption Propensity Modeling subgraph S1["数据代表性与区域差异"] A["EMEA 客户数据"] --> B["大型区域: 德国/法国/英国<br/>(样本基数庞大)"] A --> C["小型区域: 卢森堡/意大利<br/>(样本基数极小)"] end subgraph S2["建模风险与应对"] B & C --> D{"直接全局混合训练?"} D -- "是" --> E["特征被大区主导<br/>导致小区预测性能严重衰退"] D -- "否: 采用平衡与加权" --> F["赎回倾向预测模型<br/>(提前 6-12 个月预警)"] end F --> G["投资顾问主动介入挽留客户"] ``` 以联博集团(AllianceBernstein)零售分销业务为例,主讲人曾负责构建欧洲、中东和非洲地区(EMEA)的客户赎回倾向模型,旨在预测未来 6 到 12 个月内潜在的资金赎回率,从而协助投资顾问提前介入并挽留客户。在处理此类模型时,数据在地理分布上的代表性差异尤为明显:德国、法国和英国等大型市场拥有庞大的客户群,而卢森堡、意大利等小型区域的客户数量非常稀少。如果直接忽视地域差异将所有数据混在一起训练,大区特征会直接主导模型,导致面向小区顾问的模型性能严重劣化。 - **金融公平性定义**:确保金融服务与决策过程对不同受众和产品群体保持包容、无偏且公允。 - **代表性检验要求**:排除性别、社会经济背景等无关受保护变量,仅依赖与目标任务强相关的判别性特征。 - **业务场景示例**:EMEA 零售分销客户赎回倾向预测(6-12 个月周期)。 --- ### [28:22](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=1702s) 数据不平衡的应对策略与持续公平性监控 在客户流失(Churn)预警和销售线索推荐等数据科学任务中,数据不平衡是极为普遍的挑战。传统的统计学解决方法主要依赖重采样技术,例如对少数群体进行过采样(Oversampling),或对多数群体进行欠采样(Downsampling)。然而,过采样容易引入重复数据,导致模型难以获得高价值的信息增益,甚至可能带来额外的随机噪声和偏见。 面对这一问题,可以在算法层面使用对数据不平衡容忍度更高的模型(如 XGBoost),或者利用大语言模型(LLM)针对小型区域客户构建专属画像,结合其历史赎回行为进行归纳分析。此外,还可以调整评估损失函数中的代价权重(Cost Evaluation Weights)。在资产管理业务中,失去一个在小区域但管理资产规模(AUM)巨大的客户,其代价远高于在大区域失去一个小 AUM 客户,因此必须根据赎回造成的实际业务损失为不同客户分配合理权重。 由于金融市场环境变化极其迅速,过去几个月有效的模型在未来几个月可能完全失效,因此公平性与可靠性绝非“一劳永逸”的工作。团队需要部署持续的动态监控机制,通过统计学中的扩展窗口(Expanding Window)或滑动窗口(Sliding Window)不断纳入最新市场信息,取代传统的静态数据处理方式。 - **重采样手段**:少数类过采样与多数类欠采样,但需警惕重复样本引入的偏差与噪声。 - **算法与特征策略**:采用鲁棒性更强的分类算法(如 XGBoost)或基于 LLM 的客户画像分析。 - **基于 AUM 的代价加权**:根据客户潜在赎回损失的严重程度赋予不同的代价惩罚。 - **动态监控机制**:利用滑动窗口与扩展窗口持续跟踪模型表现,应对金融数据的快速时变特性。 --- ### [31:57](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=1917s) 数据隐私的核心要素与匿名化技术 在负责任 AI 体系中,数据隐私包含四大支柱:匿名性(Anonymity,防止数据泄露个体身份)、机密性(Confidentiality,严格基于权限控制数据访问)、稳健性(Robustness,抵御潜在的数据攻击与泄露风险)以及不可关联性(Unlinkability,防止攻击者通过交叉比对不同数据源逆向推断个体身份)。 ```mermaid flowchart LR accTitle: Data Privacy Core Pillars and Protection Techniques subgraph P1["隐私安全四大支柱"] A1["匿名性 Anonymity"] A2["机密性 Confidentiality"] A3["稳健性 Robustness"] A4["不可关联性 Unlinkability"] end subgraph P2["数据隐私防护手段"] B1["数据聚合<br/>(按区域/年龄段聚合)"] B2["差分隐私 DP<br/>(输出加噪 / 训练加噪)"] B3["合成数据<br/>(多变量统计模拟)"] end P1 -.-> P2 ``` 在实际业务中,最基础也最常用的隐私保护手段是数据聚合(Aggregation)。例如,私人财富管理团队向数据科学团队交付数据时,绝不会直接提供底层明细记录,而是按区域或特定属性进行聚合呈现;即便是年龄信息,也只会以“30 岁以下”或“30 至 40 岁”等年龄区间段的形式提供。 另一种重要方案是合成数据(Synthetic Data)。当受限于监管政策或合规要求无法直接分析真实数据时,可以根据原始数据的多变量统计分布特征生成仿真数据集。主讲人在此分享了自己的学术背景:“顺便提一句,我拥有心理学博士学位。”在读博期间,为了研究学生行为特征,研究团队便是通过多变量模拟生成学生特征数据进行分析,从而免去了反复招募学生进实验室做测试的繁琐流程。 - **隐私四大核心属性**:匿名性、机密性、稳健性、不可关联性。 - **数据聚合应用**:通过粗粒度区间(如年龄段、区域汇总)代替个体精准画像。 - **合成数据应用**:在受限合规场景下基于多变量统计特征进行模拟仿真,降低真实数据使用风险。 --- ### [34:12](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=2052s) 差分隐私(DP)机制与大语言模型的隐私实践 差分隐私(Differential Privacy, DP)是一种通过严格数学证明保证隐私的算法体系,其核心原理是:即便从数据集中添加或移除单条数据记录,最终的计算输出结果也不会发生显著变化。差分隐私主要分为两类应用方式: 1. **输出差分隐私(Output DP)**:在模型最终输出中添加噪声。当需要跨团队共享分析结果时,既能保证输出具有统计信息价值,又能防止接收方反查数据中的具体个体。 2. **训练差分隐私(DP-SGD)**:在机器学习模型采用随机梯度下降(SGD)进行参数优化时引入噪声,从底层阻断训练数据被逆向记忆的可能。 ```mermaid flowchart TD accTitle: LLM Privacy Protection Practical Workflow subgraph Traditional["数值数据场景"] T1["传统数值数据"] --> T2["DP-SGD / 输出差分隐私"] end subgraph LLM_Workflow["大语言模型 (LLM) 落地场景"] L1["原始提示词 / 业务数据"] --> L2["文本脱敏分析 (Redaction)<br/>轻量级 NER 识别并掩码姓名/地址/人口学信息"] L2 --> L3["脱敏后输入 LLM 推理"] L1 --> L4["私有化高效微调 (PEFT)<br/>结合 DP-SGD 防记忆并节约算力"] end ``` 差分隐私在纯数值型数据场景中表现优异,但在大语言模型(LLM)的实际落地中存在局限。如果在 Prompt 中已经包含了敏感数据,仅在输出端使用 DP 无法解决输入侧的信息暴露问题;而利用 DP-SGD 对大模型进行全量微调,虽然能有效防御模型对敏感数据的记忆,但需要消耗巨大的 GPU 算力资源,并可能导致模型收敛缓慢甚至性能下降。 针对 LLM 在实际工程中的隐私保护,主讲人提出了两条切实可行的落地建议: - **脱敏分析(Redaction Analysis)**:在数据送入 LLM 之前,利用轻量级传统机器学习模型或 NER 工具包,自动识别并掩码客户姓名、地理位置、人口统计学等敏感实体。 - **隐私参数高效微调(Private PEFT)**:结合参数高效微调(PEFT)技术进行私有化训练,在兼顾计算效率的同时防范模型记忆风险。 --- ### [37:18](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=2238s) 责任与便利的抉择:红药丸还是蓝药丸 演讲接近尾声时,主讲人向现场观众抛出了一个类似《黑客帝国》的选择题:“如果给你两颗药丸,蓝药丸代表你可以图省事、随心所欲地使用 AI;红药丸则代表你必须负责任地构建 AI,在看到不良后果之前就预先构建好负责任特性。你会选择哪一颗?” 当主讲人邀请现场观众举手表决时,选择红药丸的人占了多数;但随后主讲人请选择蓝药丸的观众举手时,台下依然有不少人举手,这让主讲人不禁惊呼:“哇,我有点惊讶(Whoa, I'm surprised)。”正是因为现实中仍有许多人出于便利而倾向于选择蓝药丸,主讲人才在此发出核心倡议: > “将责任作为一项系统功能来构建,而不是事后修补(Make responsibility a feature, not a...)。” - **现场投票互动**:探讨 AI 应用中“追求便捷(蓝药丸)”与“恪守责任(红药丸)”的现实权衡。 - **行动倡议**:在系统设计之初就将负责任 AI 理念内嵌为核心产品功能(Built-in Feature),防患于未然。 ### [38:04](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=2284s) 将伦理内嵌于设计:从源头对齐人类价值与防范长期风险 在演讲的收尾部分,主讲人强调负责任 AI 绝不是事后补救的合规审查(compliance after the fact),更不应当被视作技术性能与伦理安全之间无可奈何的妥协("not a trade-off")。开发团队必须在获取数据、构建模型之前,就将伦理考量直接内嵌到整个系统架构设计之中("embed ethics into the design")。AI 系统的优化目标必须与人类的价值观深度对齐,而不能仅仅盲目追求单一的技术性能指标。 主讲人指出,在短期内,忽略伦理约束或许能换来更快的落地便利与亮眼的性能表现,但从长远来看,前置伦理设计的根本目的是为了防范并减轻未来可能引发的重大灾难性后果。为了进一步印证这一观点,主讲人提到了当天上午图灵奖得主 Geoffrey Hinton 在大会演讲中的发言:当 Hinton 被问及 AI 伦理问题时,他坦言如果自己能够回到过去做出改变,唯一希望能重来的事情就是“在更早的时候就去深入思考 AI 的伦理问题”("think about the ethical side of AI much earlier")。最后,主讲人向全场观众致谢,并宣布进入现场提问与互动交流环节。 - **前置设计而非事后合规**:倡导在数据收集与建模初期就将伦理标准内嵌于架构中,使 AI 目标与人类价值对齐,而非在模型上线后才进行被动合规审查。 - **平衡短期效益与长期风险**:避免因过度追逐短期的便利与算法性能而埋下隐患,必须全力规避可能造成严重社会或金融后果的长远风险。 - **Geoffrey Hinton 的警示**:引用 AI 先驱 Geoffrey Hinton 的反思,警示整个行业必须尽早、主动地将伦理考量置于 AI 研发的核心位置。 ## Notable quotes > [04:55](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=295s) 有两样东西,我们愈经常愈持久地加以思索,它们就愈使心灵充满日新月异、有加无已的景仰和敬畏:在我之上的星空和居我心中的道德法则。 — 康德(Yuyu Fan 引用) > [02:15](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=135s) fix the fences after the sheep has been lost — Yuyu Fan > [24:07](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=1447s) 如果 ChatGPT 给出买入英伟达(NVIDIA)的推荐,我们根本无法判断它究竟是因为能精准预测英伟达未来的真实自由现金流,还是仅仅因为模型在训练语料中早就‘知道’了英伟达近年来股价表现极其出色。 — Yuyu Fan > [31:57](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=1917s) 顺便提一句,我拥有心理学博士学位。 — Yuyu Fan > [37:18](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=2238s) 如果给你两颗药丸,蓝药丸代表你可以图省事、随心所欲地使用 AI;红药丸则代表你必须负责任地构建 AI,在看到不良后果之前就预先构建好负责任特性。你会选择哪一颗? — Yuyu Fan > [37:18](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=2238s) 哇,我有点惊讶(Whoa, I'm surprised)。 — Yuyu Fan > [37:18](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=2238s) Make responsibility a feature, not a... — Yuyu Fan > [38:04](https://www.youtube.com/watch?v=mMSw4PqtPhM&t=2284s) 在更早的时候就去深入思考 AI 的伦理问题(think about the ethical side of AI much earlier) — Geoffrey Hinton(Yuyu Fan 引用) ## Mentioned 联博基金 (AllianceBernstein), Yuyu Fan, 杰弗里·辛顿 (Geoffrey Hinton), 康德 (Immanuel Kant), Waymo, 欧盟人工智能法案 (EU AI Act), SHAP (Shapley Additive Explanations), 孤立森林 (Isolation Forest), 英伟达 (NVIDIA), ChatGPT, XGBoost, 差分隐私 (Differential Privacy, DP), DP-SGD, PEFT (Parameter-Efficient Fine-Tuning) ## Video description Yuyu Fan, Principal Data Scientist, AllianceBernstein Abstracts Ensuring responsible AI practices is essential in financial asset management due to the significant impact AI-driven decisions can have on markets and individual financial outcomes. Typical challenges include biases in datasets, lack of transparency, and limited interpretability of AI models. Numerous solutions exist to address these concerns. This talk focuses particularly on data-driven approaches and highlight key data-centric solutions, including bias detection through algorithmic audits and fairness metrics, improved transparency via rigorous data governance and model documentation, enhanced interpretability using explainable AI methods, and robust, risk-aware modeling practices such as scenario analysis and AI stress testing. [Source](https://www.youtube.com/watch?v=mMSw4PqtPhM)

Source quotes

[4:55] 康德(Yuyu Fan 引用): 有两样东西,我们愈经常愈持久地加以思索,它们就愈使心灵充满日新月异、有加无已的景仰和敬畏:在我之上的星空和居我心中的道德法则。 [2:15] Yuyu Fan: fix the fences after the sheep has been lost [24:07] Yuyu Fan: 如果 ChatGPT 给出买入英伟达(NVIDIA)的推荐,我们根本无法判断它究竟是因为能精准预测英伟达未来的真实自由现金流,还是仅仅因为模型在训练语料中早就‘知道’了英伟达近年来股价表现极其出色。 [31:57] Yuyu Fan: 顺便提一句,我拥有心理学博士学位。 [37:18] Yuyu Fan: 如果给你两颗药丸,蓝药丸代表你可以图省事、随心所欲地使用 AI;红药丸则代表你必须负责任地构建 AI,在看到不良后果之前就预先构建好负责任特性。你会选择哪一颗? [37:18] Yuyu Fan: 哇,我有点惊讶(Whoa, I'm surprised)。 [37:18] Yuyu Fan: Make responsibility a feature, not a... [38:04] Geoffrey Hinton(Yuyu Fan 引用): 在更早的时候就去深入思考 AI 的伦理问题(think about the ethical side of AI much earlier)

Source quotes

[1:44] Yuyu Fan: fixing the fences after the sheep have been lost [4:55] Yuyu Fan: the AI made the decision [4:55] Immanuel Kant: Two things fill the mind with ever new and increasing admiration and awe... the starry heavens above me and the moral law within me [37:18] Yuyu Fan: If you were given two pills, a blue pill is you can use AI at your convenience and the red pill will be you need to do AI responsibly and build the responsible feature before you see the consequence. What would you choose?

Original transcript

[0:04] My name is Yuyu. I I'm the principal [0:06] data scientist at Alliance Bernston. AB [0:10] AB is the SM manager manages over 800 [0:13] billing AUM. [0:15] So I sit both I sit in a central data [0:19] science team. Uh so I have opportunities [0:22] to work with different business units [0:24] across a firm on the investment side on [0:27] the distribution side as well as [0:29] operation side. So basically it means [0:32] although I'm on the tech team myself but [0:35] I'm also practitioner know well about [0:38] different problems in different units [0:40] from the you know investment teams how [0:43] to generate investment signals as well [0:45] as the sales teams how to find the leads [0:48] for our clients like uh uh engagement. [0:53] So from the panelists you've already [0:55] learned I think a lot about the data [0:58] practices what you should consider when [1:00] you build your AI system or models and [1:04] this talk I will focus on the data [1:06] practices for responsible AI especially [1:09] how you use those statistical metrics as [1:13] well as measures to make sure we start [1:16] with the foundational part on the data [1:18] for responsible AI. I know when I talk [1:21] about statistical machine learning it [1:22] seems already a word that out of date [1:25] but AI actually encompass these parts. [1:28] It's not only about generative AI it is [1:31] about the techniques that's already [1:33] popular in the past I think 30 years [1:36] about how you use different elements in [1:39] it in order to do better. [1:44] Jeff Hinton this morning told us that [1:47] when AI becomes smarter and more [1:50] powerful than us. We need to make sure [1:54] they have the feature they care about us [1:56] when they building them. Right? [2:00] Essentially doing AI responsibly I think [2:04] is the most of foundational part in [2:06] order to incorporate this current [2:09] feature into our AI systems. [2:15] What if we don't build AI responsibly? [2:18] So since I stayed in finance, so today a [2:20] lot of use cases or examples I share [2:23] will be related to financial use cases. [2:26] Deep seekers last year can impersonate [2:30] about FYI executives to do frauds. So [2:35] basically it is not only a crisis in [2:39] finance some risky things about your [2:41] account it really a crisis in trust. So [2:45] think about it if you receive some [2:47] message or some reports you're not sure [2:49] it is really human generated well [2:52] trusted information or it is some AI [2:55] generated and problematic information [2:58] right [3:01] it's not only about finance so think [3:04] it's not only about the high executives [3:08] for everyone they may be able into scams [3:12] so AI field crypto scams are booming up [3:16] more than 400% in the past year from [3:19] last June to this April. [3:22] So it means any message we receive for [3:26] the potential scams and it will become [3:29] faster and faster. It will be easier for [3:31] us. AI gives a lot us a lot of [3:34] convenience to do our job and to assist [3:37] us in daily life. But it also assist [3:40] some of the mis uh uh malicious [3:43] behaviors [3:47] and also AI tools show biases. It's not [3:49] only about malicious behavior part. It [3:52] can be the AI models built with good [3:55] intention but do something with harm. So [3:59] AI models trained on past highend data [4:03] can potentially favor some names over [4:06] others. Why we they favor some of the [4:08] names? It can be representative issues. [4:11] In the past, the data is trained on [4:13] maybe because of the bias in the gender [4:15] representation, maybe because of the [4:18] titles or some past experience. So it [4:20] creates inequalities [4:24] which shouldn't be there. [4:27] So in order to mitigate or alleviate if [4:31] possible those potential harms [4:35] we need to build AI responsibly and data [4:39] will be the foundational part. [4:42] So we want to make sure we use AI with [4:46] the feature of caring for us instead of [4:50] fix the fences after the sheep has been [4:53] lost. [4:55] There's a few core elements at least in [4:58] finance we usually consider when we [5:00] build responsible AI systems. The first [5:05] one is definitely data quality. [5:09] Data quality refers to a bunch of [5:11] things. Whether the data is accurate, [5:14] whether it is reliable, whether it is [5:16] timely, it is complete and whether it [5:19] has high signal to noise ratio. Because [5:21] in finance specifically the signal to [5:24] noise ratio is very low. We receive tons [5:27] of data. But if we want to get good data [5:30] that's informative to our investment [5:32] decisions, it is very challenging. I [5:34] will explain more in details to some of [5:37] these elements. So here I will have a [5:39] high level overview about the core [5:41] elements in this process. Second one, [5:44] fairness. It's like the job application [5:47] screening process. [5:50] The data we put into before rebuilding [5:53] the model, we feed this data into the [5:55] model. We need to make sure the data is [5:57] fair to different groups. [6:00] Privacy. [6:03] I work with the distribution side in our [6:06] firm. So it has a lot of client [6:08] information. We definitely want to make [6:11] sure the data security as well as [6:14] privacy within it. [6:16] Transparency. Transparency means we [6:19] fully understand the data. We can trace [6:21] back about how we use our data in our [6:24] decision making process. [6:28] Related to transparency, it will be [6:30] explanability. [6:32] And when we think about explanability, [6:34] we usually attend attach it more to the [6:37] modeling side. You probably heard about [6:39] a bunch of methods like sharply values [6:41] or other approaches in order to make the [6:44] model results explainable. Explanability [6:47] also starts from the data. It means once [6:51] you have the results, it need to be [6:53] traced back to the inputs. So you are [6:56] able to understand to trace it back to [6:59] where the inputs contribute to the final [7:01] results and how [7:04] audibility specifically in finance [7:07] audibility as well as accountability are [7:10] really important not only in finance. [7:13] So uh Vimmore is very popular in the [7:17] west coast right but it hasn't been used [7:20] nationwide. I think one of the important [7:23] challenging part is accountability. If [7:26] there's any issues, any consequences, [7:28] who is going to take the [7:30] responsibilities, right? In finance, it [7:33] is basically the same. And there's large [7:36] deals, large traings going back and [7:38] forth. If there's any potential issues [7:40] with our clients data or their [7:42] transactions or their accounts, who is [7:44] going to take the responsibility? Who [7:47] will be holding account for that? We [7:49] wouldn't say oh AI make the decider [7:51] right it's not the right answer [7:56] cyber security [7:58] yeah for sure a lot of things I think it [8:00] just built into the system this is uh [8:03] everything need to be secure not only [8:05] the data set there's a lot of aspects to [8:07] it but it definitely ties back to the [8:09] data part [8:11] regulations compliance and legal and [8:15] finance is a highly regulated ated [8:18] industry and sector. So we need to make [8:21] sure when we build the AI systems, it [8:24] follows all the key regulations and [8:27] Europe you know EU AI act it is very [8:29] strict regulations about what type of [8:32] datas you can use to train your AI [8:34] models and it has a list of uh different [8:37] levels of harmonies it can be attend to. [8:41] So and you know we also have the SGD uh [8:44] about protocols about what kind of [8:47] actions we can do with our data with the [8:49] AI models [8:53] there's more and more elements we can [8:55] put into this loop but basically I would [8:59] uh want to emphasize the last one do no [9:02] harm K ever said that there are two [9:05] things in the mind with everlasting [9:09] wonder and law one is the staring heaven [9:13] about me and the other is the moral law [9:16] within me. So basically I think every [9:20] decisions every actions we make in our [9:23] heart we know it whether it can be [9:26] potentially harmful for others whether [9:28] there's some consequences it may imposed [9:31] to other groups. So I think when we use [9:34] a model when we deal with the data [9:37] we cannot only attend to the rules [9:39] that's written on paper or you know [9:42] presented here it will be within our own [9:45] judgment about whether there's potential [9:48] consequences we need to think of. [9:53] So with those high level information now [9:56] I want to dive deeper into the specific [10:00] elements we can use different measures [10:05] to potentially mitigate the harm it may [10:09] do the the AI models may do and improve [10:13] the responsibilities [10:16] we [10:17] attached to our own decisions. The three [10:20] elements I want to dive deeper into will [10:23] be definitely on the data side because [10:25] of the track I need to speak. And the [10:28] first one is quality and second one [10:31] would be fairness and the last one is [10:34] privacy. And I want to share very [10:36] specific statistical suggestions about [10:40] what actions what kind of analysis you [10:43] could do in order to make sure those [10:46] three aspects has been addressed [10:49] appropriately. [10:52] First one data quality. [10:56] So everything starts with data whether [10:59] you train your own models or you [11:02] directly leverage the offtheshelf model [11:05] or APIs to analyze it will always start [11:09] with data. So the first thing we want to [11:12] check is whether the data we get is [11:14] accurate whether it reflects or captures [11:18] the things or the intention we want to [11:22] use it for. [11:24] So generally I would suggest you build a [11:28] data validation pipelines to ensure the [11:31] data accuracy. For example, from the [11:35] very simple descriptive statistics, when [11:37] you receive the data, you will check [11:39] about whether it looks right, right? The [11:42] mean variance or some other [11:44] distributional statistics. [11:47] And you may do um anomaly detection. [11:50] Basically analyze those outliers. And [11:54] some of the outliers it can be simply [11:56] defined as the points that's at the very [11:59] edge using descriptive statics like [12:02] interquartile range or you can do some [12:05] uh a little fancier ones like uh uh [12:08] isolation forest. Those are the [12:13] unsupervised machine learning algorithms [12:17] that you can leverage if you don't have [12:19] labels to find those all liars. [12:22] Basically it means it will find some [12:23] data points that's far from other points [12:27] in the distributional space or if you [12:30] have the label data you can build the [12:33] supervised approach you can have a [12:36] classification model or you can give [12:38] examples to large language models seeing [12:40] those potentially the the allies [12:42] potentially may have some of the [12:44] features and I check those data points [12:46] whether it has potential outliers and I [12:50] build anomaly det protection models for [12:53] our accounts to make sure they handle [12:57] transactions and as well as different [13:00] attributes from uh our clients properly. [13:04] And there's also reference data cross [13:06] checks, right? Usually you have data [13:09] especially on client side or some of the [13:11] investment data. It's not a single data [13:13] set. You probably have different data [13:14] sets you can cross reference and check [13:17] in order to make sure the accuracy of [13:19] the data before you entering them into [13:21] the model for further insights or [13:24] actions. [13:26] Reliability. [13:28] So the data is accurate but we also want [13:31] to make sure it is reliable across time. [13:34] So in finance we deal with a lot of time [13:37] series data. Sometimes you check the [13:41] data it works but if you just put it [13:44] aside thinking everything works fine [13:46] that's not the case. So as in the first [13:48] point, if you build a data validation [13:51] pipeline and you want to check the [13:53] reliabilities of it across time to see [13:57] whether there's potential drifts [13:59] um especially when I [14:02] generate investment signals for some of [14:05] the investment teams, the data comes in [14:07] due to different regimes and marketing [14:09] conditions. [14:11] There can be clearly data shifts about [14:14] how reliable it can be and even some of [14:17] the news data we work on we will monitor [14:19] the volumes. If today there's let's see [14:23] 10,000 news articles but tomorrow it [14:26] becomes 5,000 then I need to figure out [14:29] what's going on. Is it just regular [14:30] fluctuations due to it is weekend [14:33] holiday or there's some potential issues [14:35] on the data we received [14:38] and stationary check also you know [14:40] similar stationary track is very [14:43] specific to financial time series [14:44] analysis so I wouldn't elaborate here [14:48] and uh besides those statistical [14:50] measures you can use some of the [14:52] resilience infrastructures and you know [14:55] those are more on the [14:58] uh technical Right. And the next one is [15:01] about timely needs and finance. You [15:04] know, depending on how we use the data, [15:06] if you do intraday trading, you you need [15:08] to be very mindful about the the lags of [15:12] the data to make sure you receive those [15:14] data timely. And there's also freshness [15:17] scores we can generate to understand uh [15:21] whether we receive those data at the [15:23] frequency is supposed to be. For [15:25] example, I analyze earnings calls data [15:28] and for earnings calls for majority of [15:30] the contents in the US, Russell's [15:31] resolant. We receive them very timely. [15:34] Probably 20 or 30 minutes after the [15:36] call, it will be streamed into our [15:38] database. But for emerging markets, it [15:40] can take longer. Some of the calls maybe [15:42] two months we only receive the first [15:45] version. then it will definitely impact [15:47] your portfolio constructions when you [15:50] need to use it for rebalance because [15:53] suppose next Monday I'm going to [15:54] rebalance my portfolio but the data [15:56] points I referred to is actually last [15:58] year's earning call it wouldn't be very [16:00] informative [16:03] completeness missing data I think [16:06] everyone if you deal with real world [16:08] data you will be you know see miss data [16:11] a lot and there's different patterns of [16:13] miss data for different patterns of mis [16:15] data data you actually work be dumped [16:17] differently. Next slides I will give you [16:20] more details about missing data. Last [16:23] one signal to noise ratio. [16:27] So it needs a lot of cleaning uh in [16:29] finance in order to find the useful [16:32] signals in the vast amount of financial [16:34] data you know text data, audio data, [16:37] image data, uh cell data, traffic data [16:40] and a lot of those needs tons of [16:42] cleaning. For example, even for news, [16:44] whether we can clearly tag the [16:47] components and whether we know the [16:50] topics and whether we know the sentiment [16:53] for specific components for specific [16:55] topics. It sounds straightforward, but [16:58] when you need to deal with millions of [17:00] news, then it's a lot of work and also [17:03] it's very GPU heavy in order to have the [17:05] correct tagging for those. [17:08] So uh and also specific to finance in [17:11] order to find whether the signal to [17:13] noise ratio is uh acceptable we use back [17:17] testing and simulation. Back testing is [17:19] to see with regarding the historical [17:21] data whether we can find potential [17:24] investment signals and simulation will [17:27] be more on the forward testing like [17:30] paper testing. we will simulate if we [17:32] use these signals to treat whether it [17:34] will give us some uh good performance. [17:39] So now going back to miss data there's [17:41] different patterns of miss data and it [17:43] is very clearly you know uh but I I kind [17:47] of dealing with this in statistics a lot [17:50] and the first one is missing completely [17:53] at random it basically means you have [17:56] missing data but this missing data [17:59] doesn't relate to the missingness itself [18:02] it just because of certain limits you [18:05] have the missing data for example I work [18:08] with earnings calls and but earnings [18:10] calls wasn't well documented or archived [18:14] before 2008. [18:17] So I there may be occasional like data [18:19] points we can click uh we can collect [18:21] but it wouldn't be systematically [18:23] covering about CSP 500 Russell 1000 then [18:27] I cannot use them but the miss itself [18:31] doesn't related to the like uh certain [18:36] competence or certain sectors it is [18:38] basically because of the maybe [18:39] technology itself or data collection uh [18:42] approaches at that time we wouldn't be [18:44] able to access them anymore. more then a [18:47] means for our back testing or for our [18:50] signal generation we will probably only [18:52] start with 2010 to make sure we have [18:55] good coverage when we do back testing [18:57] when we check their performance we have [18:59] enough good enough evidence to show [19:04] for missing at random it means you know [19:08] there's missingness you also understand [19:10] those missingness are attached to [19:13] certain observable features or [19:15] characteristics ics of your data. For [19:18] example, I work with RIT data to check [19:22] about whether we can use more advanced [19:24] AI models to boost our portfolio [19:26] constructions or stock pickings. [19:30] Some of the features or factors [19:34] have a lot of missing values. [19:37] For example, about the average leasing [19:41] terms, it turns out it's basically [19:43] missing let's say for hotel sector and [19:46] this is obvious because hotels you know [19:49] as us we come to conference we may stay [19:51] a few days or maybe one or two days as [19:53] we travel there wouldn't be a long-term [19:56] leasing uh term for like uh the the the [20:00] uh residents housing routines or some of [20:03] the uh data centers when you have the [20:05] lease. It will be a long-term lease [20:07] which can inform whether they will have [20:09] continuous revenues. Right? [20:12] For those there's different type of [20:14] handlings. [20:16] If you want to build a generic model [20:20] means you have a model that applies for [20:22] RITs in total, [20:25] you can fill in those missing needs for [20:28] the risk sector using uh sorry for the [20:32] uh hotels using crosssectional means for [20:36] those specific components. So basically [20:38] it means because you use mean all those [20:41] competence when you make investment [20:43] decisions it tends to center in the [20:46] middle in your decision when you pick [20:48] them then the competence with the actual [20:52] features either they will behave good or [20:54] they will behave bad then will be at the [20:57] top or at the bottom and then it is [20:59] still informative for you to make the [21:01] decision [21:02] or you can build sector specific models. [21:06] It means you build a specific models for [21:10] the hotel sectors then you don't use [21:11] this feature you just drop it because it [21:13] doesn't apply to it. But for others data [21:16] centers commercial buildings you will [21:18] build the the model specifically using [21:21] such features without the amount of [21:23] missingness. [21:26] The last one is missing not at random. [21:29] So it basically means [21:32] the missingness depends on the reasons [21:36] of it is missing. [21:39] It's not just due to some unpredict [21:41] predictable limit. It's not because of [21:44] its dependency on another observed [21:47] variable. It is just because of the [21:50] missing itself. And very clearly you [21:52] know there's a uh a lot of surveys and [21:55] if they ask you about what is your [21:57] household income a lot of people don't [21:59] really fill it in right and that's [22:01] because no one gen no not no one but [22:04] generally majority of us don't want to [22:06] disclose the house incomes to some of [22:09] the you know institutions we don't fully [22:12] understand. So that's depending on the [22:14] missing list itself. [22:16] Then in finance it will be private [22:19] components and uh we do a lot of [22:21] research on publicly traded companies [22:23] but we also have research teams focus on [22:27] the private markets but we have very [22:29] limited information on the private [22:31] companies because those information are [22:33] not publicly disclosed right due to [22:37] regulation they they cannot all the [22:38] rules they they don't need to uh [22:41] disclose those information. It will pose [22:44] a lot of challenges for us to analyze [22:46] those components and data sourcing is [22:48] the number one kind of uh uh concern or [22:52] emphasis in our analysis and we'll trace [22:54] back you know to the data quality [22:56] because we want to make sure once we get [22:58] information on those private components [23:00] it is accurate and reliable and we often [23:04] do some proxy analysis means you know [23:07] you may heard of prop propensity score [23:10] analysis basically you will find Some [23:12] it's like the valuation strategies. You [23:15] will find some components that may have [23:17] the similar profile in the public [23:20] sectors with the private sectors. So [23:22] then you can compare them or estimate [23:25] some of the features on the private [23:26] components but it wouldn't be follow [23:28] fully accurate. That's why when we deal [23:31] with missing not at random we need to be [23:34] super careful about how we source those [23:37] information in order to replace or [23:39] surrogate the missingness. [23:43] So those are the three major types and [23:46] it ties back to the data quality. If you [23:48] understand the reasons or miss, you will [23:51] make more informed decisions when you [23:54] decide how to use those data and how to [23:57] deal with those misunders [24:01] uh simply generate the mean which can [24:04] bias your results. The next one is about [24:07] fairness. There's a lot of bias in [24:10] finance. [24:12] Uh for example, look how bias we now use [24:15] large language models and we use it for [24:18] research reasons to check about whether [24:21] it can have recommendations of stocks or [24:24] the positions we should have with those [24:26] uh trading behaviors. [24:29] But we haven't been really create a [24:31] portfolio fully rely on large language [24:35] models decision or recommendations. One [24:37] of the reasons is look ahead of bias. As [24:40] we all know many of the latest used [24:44] models they're trending uh yearly cut [24:47] off at the end of 2023 or middle of [24:50] 2024. So it means potentially all those [24:54] data webcable they've already been [24:57] exposed to the past performance of the [25:00] components we need to understand. [25:04] So basically if let's see chpt give us a [25:08] recommendation we should buy Nvidia and [25:11] we don't know it is because Nvidia now [25:14] works really well and the large language [25:16] models can predict its future cash flows [25:20] and future performance really well or it [25:22] is simply because it's already like in [25:26] the past it's it's performing well so [25:28] it's already exposed to the to the [25:31] performance data. So it knows it [25:34] performed well. [25:37] For today I think I will make it more [25:40] generic. And when we think about [25:42] fairness [25:44] we know in finance it means ensuring [25:46] financial decisions or services are [25:49] inclusive unbiased and equitable [25:53] regardless of the different groups or [25:56] the different products we serve for. [26:01] So the first thing to ensure about the [26:04] fairness on the equity side would be [26:07] check the representativeness. [26:11] This will be very spec specific to the [26:14] use cases as the news headline we show [26:17] before. Then they build a model on the [26:21] for the recruiting purposes. We want to [26:24] make sure the data we use to fine-tune [26:27] or train the model is representative for [26:31] different groups based on gender, based [26:34] on social economics datas or based on [26:36] any other features that's irrelevant to [26:40] make our decisions. And of course the [26:42] skill sets it's need to be [26:44] discriminative, right? We want to select [26:46] the candidates that has a skill sets for [26:49] the purpose of the position. [26:52] So we often do group comparisons and for [26:56] us on the um you know I I think I will [26:59] use examples on the distribution side [27:01] when we work these clients and when we [27:04] build some models for example I work [27:06] with the retail side and for our retails [27:09] it wouldn't be individual like investors [27:11] it will be still the warehouses and you [27:13] know uh relative large institutions but [27:16] small trees a month so I build a [27:20] uh redemption propensity model to check [27:23] about what is a potential like [27:26] redemption rate in the next six and 12 [27:29] months is so our advisors can act uh uh [27:32] like uh in advance in order to save [27:35] those clients especially in EMIA and uh [27:38] when I work with the EMIA model the [27:40] first thing I would check is the client [27:43] distributions as well as [27:45] representativeness in different regions [27:49] big regions like uh Germany And then [27:51] France we usually have a lot of client [27:53] base UK but small regions like [27:56] Luxembourg as well as uh uh Italy it is [28:00] very small number of clients. So if I [28:03] build model just regardless of all [28:06] regions it is potentially using more [28:08] features from the large regions than the [28:11] small regions. It will definitely deter [28:13] detectorate my model performance when I [28:17] work with advisors from different [28:19] regions. [28:22] So there's different approaches to deal [28:26] with this data imbalance. I think if you [28:29] you know work in data science, if you [28:31] happen to work on client trend data or [28:34] some of the uh client leads in order to [28:38] push to the advisors to know who they [28:41] should reach out to, who they should [28:43] upsell to, who they should like [28:45] crossell, then data imbalance is [28:47] definitely some problems most of you [28:49] will encounter. [28:51] So traditional statistical methods to [28:53] deal with data imbalance will be [28:56] resampling. So you would oversampling [28:59] the minority or you would down sample [29:02] the majority to make sure they're [29:04] roughly even but also have some of the [29:07] bias may be bring to this process [29:09] because it basically means you may have [29:12] especially for the small group you may [29:14] have some of duplicates of those [29:16] essentially it's not that [29:19] it doesn't bring high vits to the model [29:21] results because of the duplicates and [29:24] you may add some random noises that [29:26] there's a bunch of statistical methods [29:27] we can deal with it. [29:32] And the second is we can [29:36] apply some of the models [29:40] that can handle about imbalance a little [29:44] better than other models. For example, [29:47] SG boost and it may be well or you can [29:50] use large language models. Instead of uh [29:54] uh throwing all the data into the into a [29:59] machine learning classification [30:01] algorithm, you may build profiles for [30:03] these small region clients and then ask [30:06] about what is the potential based on [30:08] their password redemption behavior. But [30:11] when you throw those data into large [30:14] language models, there's also a privacy [30:17] layer you need to sync off because not [30:19] everyone using large language models [30:21] local. Oops. When you use API keys, when [30:24] you use uh if if you don't start a [30:28] local, don't use your own GPU to do the [30:30] inference. there's a privacy layer you [30:33] need to consider [30:36] for uh I think evaluation adjustments [30:40] it's kind of the same flavor with the [30:42] first one machine learning you know you [30:44] assign different weights to the cost [30:46] evaluation because some regions even it [30:49] is small maybe losing a big AUM clients [30:54] will be more kind of severe than losing [30:57] a small AUM clients in a big region so [31:00] you will assign [31:01] different wheats to the clients based on [31:04] the cost of the redemption. [31:10] And similarly to the reliability is not [31:13] only a one-time things. When we build [31:15] models, you know, in finance, it changes [31:17] very quick. A model that works in the [31:20] past few months may not work in the next [31:22] few months. [31:24] And uh for this uh ongoing fairness [31:27] monitoring, it is important [31:30] So what we basically do is uh you know [31:33] statistically you can use an expanding [31:35] window or you can use a sliding window. [31:37] Basically it means it's better to [31:41] implemented a mechanism that can [31:44] incorporate the new information into the [31:46] model instead of using a statistic way [31:49] to static way to deal with the data. [31:57] The last big elements I want to touch is [32:01] about data privacy. [32:05] So there's a few key elements on the [32:08] data privacy side. Anonymity [32:11] um you know we don't want to we don't [32:14] want to uh leak about who is in the [32:17] data. Confidentiality we want to make [32:20] sure only person with appropriate rights [32:22] can access the data. robustness. [32:25] So the the how we store the data it can [32:30] be resistant to potential attacks or [32:33] breaches and unlinkability. [32:36] So it's previously we said in order to [32:38] validate the data accuracy you can use [32:40] cross check. Then on the other side side [32:43] we don't want people they can cross [32:45] check then they can infer who is in the [32:48] data. [32:50] So there's different anonymization [32:52] uh techniques which I will show you some [32:55] details later and uh simple most simple [32:59] kind of way is using aggregation for [33:02] example when I receive data from the [33:04] private wealth client side the team [33:06] never give me directly all the client [33:08] data they give me the aggregated data [33:10] just aggregated by region or aggregated [33:13] by some features they wouldn't give me [33:15] their specific kind of age even they [33:18] will give mean those you know who are [33:20] below 30s or those who are between 30 [33:23] and 40s. [33:25] Differential privacy this is an [33:27] algorithm basically a statistical way [33:29] you can deal with it. And last one [33:31] synthetic data if some point the data [33:35] it's based on the policy regulation or [33:37] any of the rules it wouldn't be safe to [33:39] analyze those data directly. You can [33:41] actually simulate the data based on [33:43] their statistical features. When I was [33:45] in graduate school, I work with a lot of [33:48] uh multi- kind of varied simulations [33:51] because of uh by the way I have a PhD in [33:54] psychology. So I deal with a lot of [33:56] educational student data at that time in [33:58] order to simulate some of the features [34:00] of the students on how they behave. So [34:02] we we we do like a simulation instead of [34:06] getting the students in and doing [34:07] experiments and then do the analysis. [34:12] So we are a little tight on time then I [34:14] will just uh uh go directly to the [34:18] statistical way about how you can deal [34:21] with data privacy. There's a algorithm [34:23] called differential privacy DP [34:25] algorithm. There's two type of basically [34:28] DP algorithm ensures if you remove a [34:31] data into the data set the results [34:34] wouldn't change much. [34:37] There's two main types of uh DP [34:40] algorithm. One is output DP. Basically, [34:43] once you have the output, if you need to [34:45] hand the output to some uh other teams, [34:48] collaboration teams, you don't want them [34:50] to identify who is in the data, you can [34:52] add noise in the outputs to make sure [34:56] the information you shared are still [34:58] informative, but they don't know who's [35:00] in the data. The other will be the [35:02] trending DP. Basically for many of the [35:05] machine learning models you will use [35:07] stoastic gradient descent in order to do [35:11] the optim parameter estimation to find [35:13] the optimal ones and you can add noise [35:17] uh into this process in order to make [35:20] the data entering into the model and and [35:23] and identified. [35:25] So uh if you think about numerical data [35:28] the DP algorithm will be pretty useful [35:32] but for large language models if you use [35:36] DP algorithms in the output doesn't [35:39] seems to be that useful because you've [35:41] already exposed the data into your [35:43] prompts into the large language models [35:46] or if you use the fine-tuning not [35:49] everyone you know do that part and even [35:51] you know let alone about uh the [35:53] pre-trending part. So the DP algorithm [35:56] DPSGD type will have some advantages. [35:59] For example, it it definitely has better [36:02] privacy preserved and uh uh it can [36:06] defense against the memorization. But [36:08] still we know that even fine-tuning the [36:12] large language models will require a lot [36:14] of resources. at least you need to have [36:16] a GPU to fine-tune any of the large [36:18] language models and it may have slow [36:22] like uh converge and it may uh [36:25] convergence and it may also decrease the [36:27] performance. [36:30] So for large language models on the [36:34] practical side I would suggest two [36:36] things. One is reduction analysis. [36:39] Basically means before you put the data [36:42] into the large language models, you [36:44] identify the privacy information that [36:46] need to be masked and then put the [36:48] information into large language model [36:50] such as client names, maybe some of the [36:52] demographic features of the clients and [36:55] those you can use traditional machine [36:57] learning which is pretty small models or [37:00] packages you can directly deal with. for [37:02] example, entity recognition with names [37:05] with their address uh locations, right? [37:07] And private finetuning with uh uh PFT [37:12] more proficient way of uh uh parameter [37:16] finetuning. [37:18] So if you were given two pills, a blue [37:21] pill is you can use AI at your [37:23] convenience and the red pill will be you [37:26] need to do AI responsibly and build the [37:29] responsible feature before you see the [37:32] consequence. What would you choose? [37:38] How many uh could you raise your hand if [37:41] you want to choose the red pill? [37:45] Thank you. And can you raise your hand [37:46] if you want to choose a blue peel? [37:50] Whoa, I'm surprised. [37:54] Cool. I know. That's why I want to call [37:56] for action at the end. [38:00] So make responsibility a feature, not a [38:04] compromise, not a trade-off. [38:07] In that ethics into the design, not just [38:10] a compliance after the fact. So when you [38:14] before you getting the data before you [38:16] building the model think about what you [38:18] can do and align AI goes with human [38:22] values not just the technical [38:24] performance. So for the short term we [38:27] may have convenience we may have good [38:29] performance but in the long term we want [38:33] to alleviate the possibilities of large [38:36] consequences. And in this morning's talk [38:40] when Jeffrey Hinton was asked about the [38:43] ethics side he said the only thing he [38:46] could you know maybe uh change if he can [38:50] in the past would be think about the [38:54] ethical side of AI much earlier. [38:59] Yeah. Uh that's my talk and thank you [39:02] all and I'll stay I'll happy to take any [39:05] questions if you have. Thank you.