Mitigation strategies for regulatory risk in AI data procurement