IAPP Artificial Intelligence Governance Professional (AIGP) — Question 30

An EU bank intends to launch a multi-modal AI platform for customer engagement and automated decision-making to assist with the opening of bank accounts. The platform has been subject to thorough risk assessments and testing, where it proves to be effective in not discriminating against any individual on the basis of a protected class.
What additional obligations must the bank fulfill prior to deployment?

Answer options

• A. The bank must obtain explicit consent from users under the ePrivacy Directive.
• B. The bank must disclose how the AI system works under the EU Digital Services Act.
• C. The bank must subject the AI system to an adequacy decision and publish its appropriate safeguards.
• D. The bank must disclose the use of the AI system and implement suitable measures for suers to contest automated decision-making.

Correct answer: D

Explanation

Answer D is correct because it emphasizes the necessity for transparency and user rights regarding automated decision-making. Answers A, B, and C, while relevant to regulatory compliance, do not specifically address the obligations related to user contestation of automated decisions, which is critical in this context.