Privacy and Data Governance Programs AAIA Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   In the context of data governance, what is the primary role of a data steward?

   • ATo develop and maintain the technical infrastructure for storing and processing data.
   • BTo provide legal advice on data protection regulations and compliance.
   • CTo own the data and make final decisions about its use and access.
   • DTo implement and enforce data quality standards and ensure data is used in accordance with policies.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What is the primary purpose of assessing third-party vendors in the context of AI systems?

   • ATo guarantee that the vendor will not share data with any other parties.
   • BTo identify and mitigate privacy risks associated with the vendor's processing of personal data.
   • CTo ensure that the vendor uses the same AI algorithms.
   • DTo evaluate the vendor's financial stability.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Which of the following is typically the first step in conducting a Privacy Impact Assessment (PIA)?

   • ADeleting all personal data from the system.
   • BDescribing the system and its data flows.
   • CConsulting with data protection authorities.
   • DImplementing mitigation measures.
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A multinational bank is implementing a new data inventory tool to support its AI systems. The bank must comply with GDPR's data subject access request (DSAR) requirements. The data governance team is deciding on the level of granularity for the data inventory. Which approach best supports DSAR compliance?

   • ACreate a detailed inventory that maps each data element to its system, owner, retention period, and lawful basis for processing.
   • BCreate an inventory of data that is actively used by AI models, and exclude archived or backup data.
   • CCreate a high-level inventory that lists data categories (e.g., 'customer financial data') and the systems that store them.
   • DCreate an inventory only for data stored in the cloud, as on-premises data is not subject to GDPR.
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   What is the primary purpose of a Privacy Impact Assessment (PIA) for an AI system?

   • ATo ensure that the AI system is compliant with security standards.
   • BTo determine the cost-effectiveness of the AI system.
   • CTo evaluate the technical performance of the AI model.
   • DTo identify and mitigate privacy risks associated with the system's processing of personal data.
   Reveal Solution Discussion Select an answer first