IAPP Artificial Intelligence Governance Professional (AIGP) — Question 120

CASE STUDY -
Please use the following to answer the next question:
A mid-size US healthcare network has decided to develop an AI solution to detect a type of cancer that is most likely to arise in adults. Specifically, the healthcare network intends to create a recognition algorithm that will perform an initial review of all imaging and then route records to a radiologist for secondary review pursuant to agreed-upon criteria (e.g., a confidence score below a threshold).
To date, the healthcare network has:
Defined its AI ethical principles.
Conducted discovery to identify the intended uses and success criteria for the system.
Established an AI risk committee.
Assembled a cross-functional team with clear roles and responsibilities.
Created policies and procedures to document standards, workflows, timelines and risk thresholds during the project.
The healthcare network intends to retain a cloud provider to host the solution. It also intends to retain a large consulting firm to supplement its small data science team and help develop the algorithm using the healthcare network’s existing data and de-identified data that is licensed from a large US clinical research partner.
In the design phase, which of the following steps is most important in gathering the data from the clinical research partner?

Answer options

Correct answer: D

Explanation

The correct answer is D, as reviewing the terms of use is essential to ensure that the data can be used legally and in accordance with the partner's regulations. While performing a privacy impact assessment, combining anonymized data, and segregating data sets are important tasks, they are secondary to understanding the legal framework governing the data usage.