Understand Regulatory Frameworks CY0-001 Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Which of the following is a current trend in AI regulation?

   • AA global move to deregulate AI to encourage innovation without any oversight
   • BRequiring all AI systems to be open-source
   • CElimination of all AI regulations to promote free market competition
   • DIncreased focus on transparency and explainability of AI systems
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A healthcare AI company develops a diagnostic tool that uses patient data. The company is subject to HIPAA and is considering expanding to the EU. The company's legal team is reviewing the compliance requirements. Which requirement is unique to GDPR and not required by HIPAA?

   • AProviding patients with access to their health records.
   • BConducting a Data Protection Impact Assessment (DPIA) for high-risk processing activities.
   • CImplementing administrative, physical, and technical safeguards to protect patient data.
   • DSigning a Business Associate Agreement (BAA) with third-party vendors.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Which US agency is primarily responsible for enforcing consumer protection laws that can apply to AI systems, such as those involving deceptive practices?

   • AFederal Communications Commission (FCC)
   • BSecurities and Exchange Commission (SEC)
   • CNational Institute of Standards and Technology (NIST)
   • DFederal Trade Commission (FTC)
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A US-based AI company processes health data of EU citizens. The company is not established in the EU but offers services to EU patients. The company has designated a representative in Germany. Which regulatory body has the authority to impose fines on the company for GDPR violations?

   • AThe European Commission
   • BThe Federal Trade Commission (FTC)
   • CThe European Data Protection Supervisor (EDPS)
   • DThe German Data Protection Authority (DPA)
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   What is a compliance requirement under HIPAA for covered entities that use AI to process protected health information (PHI)?

   • AObtaining written consent from patients for every use of their PHI in AI systems
   • BPublishing de-identified data in public datasets to promote research
   • CStoring PHI only on encrypted cloud servers outside the United States
   • DImplementing safeguards to ensure the confidentiality, integrity, and availability of PHI
   Reveal Solution Discussion Select an answer first