Exam AIGP topic 1 question 5 discussion

Actual exam question from IAPP's AIGP

Question #: 5
Topic #: 1

CASE STUDY -
Please use the following to answer the next question:
A company is considering the procurement of an AI system designed to enhance the security of IT infrastructure. The AI system analyzes how users type on their laptops, including typing speed, rhythm and pressure, to create a unique user profile. This data is then used to authenticate users and ensure that only authorized personnel can access sensitive resources.
When prioritizing the updates to its policies, rules and procedures to include the new AI system for user authentication, the organization should:

A. Update third-party data sharing policies.
B. Update security controls for sensitive data.
C. Ensure that any personal data used is only processed for a specific and lawful purpose.
D. Reduce the complexity of the policy to make it easier for non technical employees to understand.

Show Suggested Answer

Suggested Answer: C 🗳️

by [deleted] at Aug. 4, 2025, 3:07 a.m.

Comments

Submit Cancel

cloudera

1 week, 1 day ago

Selected Answer: C

The system is collecting behavioural biometrics (typing speed, rhythm, pressure). This is personal data, and in many jurisdictions it may be treated as sensitive because it identifies an individual. Before anything else, the organization must ensure the data is collected and used under a lawful basis, aligned with purpose limitation requirements in privacy law (e.g., GDPR, Australian Privacy Principles). So C

upvoted 1 times

...