Privacy and Data Governance Programs AAIA Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A large enterprise has implemented a new privacy program for its AI systems. The Chief Privacy Officer wants to measure whether the program is effective over time. Which metric would be most indicative of a mature privacy program's effectiveness?

   • AThe total number of data subject access requests (DSARs) received in a year.
   • BThe percentage of AI models that have a completed and up-to-date Privacy Impact Assessment before deployment.
   • CThe amount of storage used by the AI training datasets.
   • DThe number of privacy training modules completed by AI developers each quarter.
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   Which of the following is an example of a privacy metric that could be used to monitor an AI system?

   • AThe number of users of the AI system.
   • BThe cost of cloud infrastructure.
   • CThe number of data subject access requests completed within the required timeframe.
   • DThe number of AI model parameters.
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   What is the primary goal of incorporating privacy by design into the development of an AI system?

   • ATo ensure that privacy considerations are integrated into the system from the initial design phase.
   • BTo minimize the need for user consent by reducing data collection.
   • CTo ensure that the system is compliant with all applicable privacy laws.
   • DTo make the system's privacy features optional so users can choose their level of protection.
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A company's AI development team frequently handles sensitive personal data. The privacy team has created a training program, but completion rates are low, and developers say the training is too generic. What is the most effective way to improve the privacy culture and training effectiveness for this team?

   • AReplace the training with a one-time awareness campaign and a poster in the office.
   • BOutsource all privacy training to an external provider to ensure it is comprehensive.
   • CDevelop role-based training that uses real-world AI development scenarios, such as data minimization in model training and handling DSARs in production.
   • DMake the training mandatory and require annual completion as part of the performance review process.
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   An e-commerce company trains a recommendation AI on customer purchase history. The data governance policy requires that customer data be retained only as long as necessary. The legal team has determined that the company must keep transaction records for 7 years for tax purposes. What is the most appropriate retention strategy for the customer purchase data used in AI training?

   • ARetain the raw transaction data for 7 years, and use it to retrain the AI model continuously during that period.
   • BAnonymize the transaction data after the AI model is trained, and retain only the anonymized dataset for the 7-year period.
   • CKeep the raw data for 7 years in a secure data lake, and restrict access to only the tax compliance team.
   • DDelete the transaction data immediately after training the AI model, and rely on the model's learned parameters as the only record.
   Reveal Solution Discussion Select an answer first