Privacy and Data Governance Programs AAIA Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is the primary purpose of privacy metrics in a data governance program?

   • ATo automate the deletion of personal data.
   • BTo provide legal evidence for regulatory compliance.
   • CTo ensure that all employees are trained on privacy policies.
   • DTo measure the effectiveness of privacy controls and identify areas for improvement.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A government agency is planning to deploy an AI system that uses facial recognition to verify identities for online public services. The agency must conduct a Privacy Impact Assessment (PIA) before deployment. Which element is most critical for the PIA to address in this high-risk context?

   • AThe cost of the facial recognition system compared to traditional password-based authentication.
   • BThe technical accuracy of the facial recognition algorithm on different demographic groups.
   • CThe necessity and proportionality of using facial recognition compared to less intrusive identity verification methods.
   • DThe public's preference for facial recognition over fingerprint scanning.
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A city government is planning to deploy an AI system that uses CCTV footage and facial recognition to identify individuals in public spaces for law enforcement purposes. The project is highly controversial. The privacy office must conduct a PIA. Which factor is most likely to be the deciding point in the PIA's outcome?

   • AThe public's opinion on the use of facial recognition technology.
   • BWhether the use of facial recognition in public spaces is necessary and proportionate to the stated law enforcement purpose.
   • CThe cost of the system compared to the budget allocated for public safety.
   • DThe accuracy of the facial recognition algorithm in identifying individuals from different ethnic backgrounds.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is the primary purpose of documenting the lawful basis for processing personal data in an AI system?

   • ATo provide users with a clear explanation of how the AI system works.
   • BTo demonstrate accountability and compliance with data protection regulations.
   • CTo ensure that the AI system is technically secure.
   • DTo reduce the amount of personal data collected by the system.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which of the following best describes the primary purpose of the NIST Privacy Framework?

   • ATo provide a set of legally binding requirements for organizations to achieve compliance with privacy regulations.
   • BTo certify that an organization's privacy program meets international standards for data protection.
   • CTo replace the need for an organization's own privacy policies and procedures with a universal set of controls.
   • DTo offer a structured approach for organizations to identify, assess, and manage privacy risks while aligning with business objectives.
   Reveal Solution Discussion Select an answer first