IAPP Artificial Intelligence Governance Professional (AIGP) — Question 68

CASE STUDY -
Please use the following to answer the next question:
A company is considering the procurement of an AI system designed to enhance the security of IT infrastructure. The AI system analyzes how users type on their laptops, including typing speed, rhythm and pressure, to create a unique user profile. This data is then used to authenticate users and ensure that only authorized personnel can access sensitive resources.
The data processed by the AI system would be classified as:

Answer options

• A. Non-sensitive personal data, since it does not reveal information about health, gender or race.
• B. Organizational data, since it is part of the authentication process.
• C. Non-personal data, as long as it is not linked to a user ID.
• D. Special category data, if it can be used to uniquely identify a person.

Correct answer: D

Explanation

The correct answer is D because the data generated from typing patterns can uniquely identify individuals, classifying it as special category data under privacy regulations. Options A and C incorrectly categorize the data as non-sensitive or non-personal, which is misleading since the data can identify users. Option B also misclassifies the data, as it is more than just organizational data due to its unique identification capability.