Businesses deploying artificial intelligence face growing legal exposure when their descriptions of data practices fail to match how their systems operate.