AIGP · Question #115
CASE STUDY Please use the following to answer the next question: A company is considering the procurement of an AI system designed to enhance the security of IT infrastructure. The AI system analyzes
The correct answer is A. Ensuring that third-party processors are based in the same country as the company.. While the company must ensure data protection compliance, it is not required that third-party processors be located in the same country; instead, adequate data protection measures and legal safeguards must be in place.
Question
CASE STUDY Please use the following to answer the next question:
A company is considering the procurement of an AI system designed to enhance the security of IT infrastructure. The AI system analyzes how users type on their laptops, including typing speed, rhythm and pressure, to create a unique user profile. This data is then used to authenticate users and ensure that only authorized personnel can access sensitive resources. All of the following are obligations of the company as a data controller when implementing its AI system EXCEPT?
Options
- AEnsuring that third-party processors are based in the same country as the company.
- BAllowing data subject access requests (DSARs).
- CImplementing technical and organizational measures.
- DConducting a Data Protection Impact Assessment (DPIA) / Privacy Impact Assessment (PIA).
How the community answered
(25 responses)- A72% (18)
- B8% (2)
- C16% (4)
- D4% (1)
Explanation
While the company must ensure data protection compliance, it is not required that third-party processors be located in the same country; instead, adequate data protection measures and legal safeguards must be in place.
Topics
Community Discussion
No community discussion yet for this question.