IAPP AIGP - Questions & Answers

CASE STUDY

A premier payroll services company that employs thousands of people globally, is embarking on a new hiring campaign and wants to implement policies and procedures to identify and retain the best talent. The new talent will help the company's product team expand its payroll offerings to companies in the healthcare and transportation sectors, including in Asia.

It has become time consuming and expensive for HR to review all resumes, and they are concerned that human reviewers might be susceptible to bias.

To address these concerns, the company is considering using a third-party Al tool to screen resumes and assist with hiring. They have been talking to several vendors about possibly obtaining a third-party Al-enabled hiring solution, as long as it would achieve its goals and comply with all applicable laws.

The organization has a large procurement team that is responsible for the contracting of technology solutions. One of the procurement team's goals is to reduce costs, and it often prefers lower-cost solutions.
Others within the company deploy technology solutions into the organization's operations in a responsible, cost-effective manner.

The organization is aware of the risks presented by Al hiring tools and wants to mitigate them. It also questions how best to organize and train its existing personnel to use the Al hiring tool responsibly. Their concerns are heightened by the fact that relevant laws vary across jurisdictions and continue to change.

The organization continues planning the adoption of an AI tool to support hiring, but is concerned about potential bias in content generated by AI systems and how that could affect public perception.

Which of the following measures should the company adopt tobest mitigate its risk of reputational harmfrom using the AI tool?

CASE STUDY

A global marketing agency is adapting a large language model ("LLM") to generate content for an upcoming marketing campaign for a client's new product: a hard hat designed for construction workers of any gender to better protect them from head injuries.

The marketing agency is accessing the LLM through an application programming interface ("API") developed by a third-party technology company. They want to generate text to be used for targeted advertising communications that highlight the benefits of the hard hat to potential purchasers. Both the marketing agency and the technology company have taken reasonable steps to address Al governance.

The marketing company has:

Entered into a contract with the technology company with suitable representations and warranties.
1. Completed an impact assessment on the LLM for this intended use.
2. Built technical guidance on how to measure and mitigate bias in the LLM.
3. Enabled technical aspects of transparency, explainability, robustness and privacy.
4. Followed applicable regulatory requirements.
5. Created specific legal statements and disclosures regarding the use of the Al on its client's advertising.

The technology company has:
1. Provided guidance and resources to developers to address environmental concerns.
2. Build technical guidance on how to measure and mitigate bias in the LLM.

3. Provided tools and resources to measure bias specific to the LLM.
4. Enabled technical aspects of transparency, explainability, robustness and privacy.
5. Mapped and mitigated potential societal harms and large-scale impacts.
6. Followed applicable regulatory requirements and industry standards.
7. Created specific legal statements and disclosures regarding the LLM. including with respect to IP and rights to data.

The agency has taken governance actions such as:

1. Conducting an impact assessment
2. Providing legal disclosures
3. Enabling bias mitigation and explainability
4. Complying with regulatory requirements

Which of the following should be included in the marketing company's disclosures about the use of the LLM EXCEPT?

According to the GDPR's transparency principle, when an Al system processes personal data in automated decision-making, controllers are required to provide data subjects specific information on?

Which of the following is a subcategory of Al and machine learning that uses labeled datasets to train algorithms?

According to the GDPR, an individual has the right to have a human confirm or replace an automated decision unless that automated decision?

Which of the following disclosures is NOT required for an EU organization that developed and deployed a high-risk Al system?

CASE STUDY

A company is considering the procurement of an AI system designed to enhance the security of IT infrastructure. The AI system analyzes how users type on their laptops, including typing speed, rhythm and pressure, to create a unique user profile. This data is then used to authenticate users and ensure that only authorized personnel can access sensitive resources.
The data processed by the AI system would be classified as:

Which of the following is a foundational characteristic of effective AI governance?

What is the primary purpose of an Al impact assessment?

What is theprimary purposeof an AI impact assessment?