IAPP Artificial Intelligence Governance Professional (AIGP) — Question 64

CASE STUDY -
Please use the following to answer the next question:
A company is considering the procurement of an AI system designed to enhance the security of IT infrastructure. The AI system analyzes how users type on their laptops, including typing speed, rhythm and pressure, to create a unique user profile. This data is then used to authenticate users and ensure that only authorized personnel can access sensitive resources.
When prioritizing the updates to its policies, rules and procedures to include the new AI system for user authentication, the organization should:

Answer options

• A. Update third-party data sharing policies.
• B. Update security controls for sensitive data.
• C. Ensure that any personal data used is only processed for a specific and lawful purpose.
• D. Reduce the complexity of the policy to make it easier for non technical employees to understand.

Correct answer: C

Explanation

The correct answer is C because it emphasizes the importance of lawful data processing, ensuring compliance with regulations like GDPR. Options A and B, while important, do not directly address the specific use of personal data by the AI system. Option D, although aimed at clarity, does not prioritize legal and ethical considerations regarding personal data usage.