Oversight controls for AI-generated personal data