Model-risk officer must resolve whether training data has a lawful basis | SmartSolo AI