IAPP Artificial Intelligence Governance Professional (AIGP) — Question 138

A deployer discovers that a high-risk AI recruiting system has been making widespread errors, resulting in harms to the rights of a considerable number of EU residents who are denied consideration for jobs for improper reasons such as ethnicity, gender and age.

According to the EU AI Act, what should the company do first?

Answer options

• A. Notify the provider, the distributor, and finally the relevant market authority of the serious incident.
• B. Identify any decisions that may have been improperly made and re-open them for human review.
• C. Submit an incomplete report to the relevant market authority immediately and follow up with a complete report as soon as possible.
• D. Conduct a thorough investigation of the serious incident within the 15 day timeline and present the completed report to the relevant market authority.

Correct answer: A

Explanation

The correct answer is A because the EU AI Act mandates immediate notification of the relevant stakeholders in the event of a serious incident. Options B and D, while important, involve actions that occur after the initial notification. Option C is incorrect because submitting an incomplete report does not align with the urgent and thorough communication required by the Act.