Discovery of personal data in machine learning models

A computer system for personal data discovery, comprising:

• one or more processors, one or more computer-readable memories, one or more computer-readable tangible storage media, and program instructions stored on at least one of the one or more computer-readable tangible storage media for execution by at least one of the one or more processors via at least one of the one or more memories, wherein the computer system is capable of performing a method comprising:
• determining at least one feature used to train a target machine learning (ML) model;
• mapping the determined at least one feature to at least one location of a data store including at least one personal data associated with the determined at least one feature;
• retrieving a data record of the at least one personal data associated with the mapped at least one feature from the at least one location of the data store;
• determining that the target ML model includes a trace of the retrieved data record;
• and
• marking the target ML model as containing the at least one personal data.

A computer program product for personal data discovery, comprising:

• one or more computer-readable storage media and program instructions collectively stored on the one or more computer-readable storage media, the program instructions executable by a processor to cause the processor to perform a method comprising:
• determining at least one feature used to train a target machine learning (ML) model;
• mapping the determined at least one feature to at least one location of a data store including at least one personal data associated with the determined at least one feature;
• retrieving a data record of the at least one personal data associated with the mapped at least one feature from the at least one location of the data store;
• determining that the target ML model includes a trace of the retrieved data record;
• and
• marking the target ML model as containing the at least one personal data.