Policy governance for personal data in AI models