Privacy and Data Governance Programs AAIA Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the first step an organization should take when a privacy incident is detected in an AI system?

   • AContain the incident to prevent further data exposure.
   • BDelete all data from the AI system.
   • CNotify all affected data subjects immediately.
   • DContact the media to disclose the incident.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the primary goal of fostering a privacy-aware culture in an organization?

   • ATo ensure that all employees understand and prioritize privacy in their daily work.
   • BTo ensure that only the privacy team is responsible for data protection.
   • CTo eliminate the need for privacy policies and procedures.
   • DTo reduce the number of privacy incidents to zero.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is the primary purpose of a data retention schedule?

   • ATo define how long different types of data should be kept and when they should be deleted.
   • BTo specify the access controls for different types of data.
   • CTo identify the data owner for each dataset.
   • DTo determine the storage location for different types of data.
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A music streaming service uses an AI to generate personalized playlists. The service's lawful basis for processing user listening history is consent. A user withdraws their consent for this processing. The AI model has already been trained on the user's historical data. What is the company's obligation regarding the user's data in the trained model?

   • AThe company must delete the user's data from the model's training dataset and retrain the model from scratch.
   • BThe company must stop using the user's data for future personalization, but it does not need to retrain the model if the data is no longer identifiable.
   • CThe company can continue using the model as-is, as the withdrawal of consent only applies to future data collection.
   • DThe company must delete the user's account and all associated data, including the model's learned parameters.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which of the following is a key step in handling a data subject's request for erasure in an AI system?

   • AIgnore the request if the data is used for AI training.
   • BVerify the identity of the requester before processing the request.
   • CCharge the requester a fee for processing the erasure request.
   • DImmediately delete all data without any verification.
   Reveal Solution Discussion Select an answer first