IAPP Artificial Intelligence Governance Professional (AIGP) — Question 134

All of the following are commonly adopted processes and policies in reducing potential risks introduced by third-party AI tools or applications EXCEPT:

Answer options

• A. Including clauses in the procurement agreement for buyers of generative AI tools to put certain liabilities on the tool supplier.
• B. Allowing publicly available information and personally identifiable information (pii) to be incorporated into the prompt.
• C. Requiring an independent third-party bias audit for third-party generative AI tools.
• D. Requiring new use cases of the generative AI tools or applications to be reviewed and approved by the generative AI governance body.

Correct answer: B

Explanation

Option B is correct because allowing publicly available information and personally identifiable information (pii) to be used in prompts increases risk rather than reducing it. The other options (A, C, and D) are proactive measures designed to mitigate risks associated with third-party AI applications, making them valid practices.