IAPP Artificial Intelligence Governance Professional (AIGP) — Question 81

A company subject to GDPR is building its governance framework for how it will collect data to be used for training of AI models.
The most important thing the company can do to ensure GDPR compliance is:

Answer options

• A. Include the requirement to fully anonymize data used to train its models.
• B. Establish a data retention schedule for data used to train its models.
• C. Source training data from a reputable company to train its models.
• D. Minimize the amount of data used to train its models.

Correct answer: D

Explanation

The correct answer is D because minimizing the amount of data used helps reduce the risk of processing personal data, thereby aiding in GDPR compliance. Options A and B, while important, do not directly address the core principle of data minimization that GDPR emphasizes. Option C does not guarantee compliance as sourcing from reputable companies does not ensure that the data is handled in accordance with GDPR.