Data Privacy CRAGE Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A mobile app developer wants to add a new feature that uses location data to recommend nearby restaurants. The developer is considering whether to collect precise GPS location or approximate location based on Wi-Fi. Which choice best aligns with data minimization?

   • ACollect approximate location based on Wi-Fi instead of precise GPS.
   • BCollect precise GPS location to provide better recommendations.
   • CCollect both precise and approximate location and let the user choose.
   • DCollect precise GPS location but only store it for 24 hours.
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A company is developing an AI system that uses facial recognition to monitor employee attendance. The system processes biometric data. The company must conduct a PIA. Which factor is most critical to include in the PIA?

   • AThe accuracy of the facial recognition algorithm.
   • BThe cost of implementing the facial recognition system.
   • CThe employee satisfaction with the system.
   • DThe necessity and proportionality of using facial recognition compared to less intrusive alternatives.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is the primary purpose of differential privacy in AI?

   • ATo encrypt data so that only authorized users can access it.
   • BTo share the model's training data with other organizations securely.
   • CTo remove all personal data from the dataset before training.
   • DTo add controlled noise to query results so that individual records cannot be inferred.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A consortium of hospitals wants to train a machine learning model on patient data from multiple institutions without sharing the raw data. They need to comply with strict data privacy regulations. Which privacy-preserving technique is most appropriate?

   • AData anonymization, where each hospital removes identifiers before sharing.
   • BDifferential privacy, which adds noise to the data before sharing.
   • CHomomorphic encryption, which allows computations on encrypted data without decryption.
   • DFederated learning, where each hospital trains the model locally and only shares model updates.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which legal mechanism under the GDPR allows the transfer of personal data from the EU to a country that does not have an adequacy decision?

   • AData Protection Impact Assessment (DPIA)
   • BBinding Corporate Rules (BCRs) are only for transfers within the same corporate group.
   • CPrivacy Shield framework
   • DStandard Contractual Clauses (SCCs)
   Reveal Solution Discussion Select an answer first