nerdexam
Isaca

CISA · Question #540

Which of the following is the MOST important regulatory consideration for an organization determining whether to use its customer data to train AI algorithms?

The correct answer is A. Collection of data and obtaining data subject consent. The most important regulatory consideration when using customer data to train AI algorithms is ensuring that data is collected lawfully and that explicit consent from data subjects has been obtained where required. This aligns with data protection laws such as GDPR, which emphasi

Submitted by sofia.br· Apr 18, 2026Protection of Information Assets

Question

Which of the following is the MOST important regulatory consideration for an organization determining whether to use its customer data to train AI algorithms?

Options

  • ACollection of data and obtaining data subject consent
  • BEthical and optimal utilization of data computing resources
  • CDocumentation of AI algorithm accuracy during the training process
  • DContinuous monitoring of AI algorithm performance

How the community answered

(53 responses)
  • A
    72% (38)
  • B
    17% (9)
  • C
    4% (2)
  • D
    8% (4)

Explanation

The most important regulatory consideration when using customer data to train AI algorithms is ensuring that data is collected lawfully and that explicit consent from data subjects has been obtained where required. This aligns with data protection laws such as GDPR, which emphasize lawful processing and informed consent for personal data use.

Topics

#Data Privacy#Regulatory Compliance#AI Data Usage#Consent Management

Community Discussion

No community discussion yet for this question.

Full CISA Practice