AI Regulatory Compliance and Legal Considerations AAIR Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A healthcare company has deployed an AI system for medical imaging analysis. The system is currently compliant with existing regulations, but the EU AI Act is expected to classify it as high-risk. The company's compliance team is developing a regulatory change management process. Which approach is most effective for ensuring ongoing compliance?

   • AHire a legal consultant to review the EU AI Act once it is published
   • BWait for the EU AI Act to be finalized before making any changes
   • CRely on the company's existing quality management system to handle regulatory changes
   • DEstablish a cross-functional regulatory watch team that monitors EU AI Act developments and conducts regular impact assessments
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A hospital deploys an AI system to recommend treatment plans for cancer patients. The system is considered high-risk under the EU AI Act. The hospital's governance committee is designing the human oversight mechanism. Which measure is most aligned with the EU AI Act's human oversight requirements?

   • ARequire a qualified physician to review and approve each AI recommendation before it is implemented
   • BDisable the AI system's override capability to ensure consistency
   • CAssign a non-clinical administrator to monitor the AI system's outputs
   • DAllow the AI system to implement treatment plans automatically, with a post-hoc audit after 30 days
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A healthcare provider is deploying an AI system to assist in diagnosing skin lesions from dermoscopic images. The system is intended for use in the EU. Under the EU AI Act, which compliance obligations are most likely to apply?

   • ANo compliance obligations if the system is approved by a notified body
   • BOnly GDPR compliance for patient data
   • CHigh-risk classification, transparency to users, and human oversight
   • DMinimal-risk classification with no specific obligations
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which of the following is a voluntary risk management framework that provides guidance for organizations to manage AI risks, but is not a legally binding regulation?

   • ACalifornia Consumer Privacy Act (CCPA)
   • BEU AI Act
   • CNIST AI Risk Management Framework
   • DGeneral Data Protection Regulation (GDPR)
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A multinational corporation uses an AI system to analyze employee performance data across multiple countries, including the EU and the US. The system's outputs are used for promotion decisions. The corporation's legal team is assessing legal risks. Which legal risk is most significant?

   • AViolation of US federal employment laws that prohibit AI in HR decisions
   • BViolation of the EU AI Act's prohibition on AI systems that manipulate human behavior
   • CViolation of intellectual property rights because the AI system may use proprietary algorithms
   • DViolation of GDPR's data minimization and purpose limitation principles
   Reveal Solution Discussion Select an answer first