IAPP Exam AIGP Topic 5 Question 21 Discussion

Actual exam question for IAPP's AIGP exam

Question #: 21
Topic #: 5

You are a privacy program manager at a large e-commerce company that uses an Al tool to deliver personalized product recommendations based on visitors' personal information that has been collected from the company website, the chatbot and public data the company has scraped from social media.

A user submits a data access request under an applicable U.S. state privacy law, specifically seeking a copy of their personal data, including information used to create their profile for product recommendations.

What is the most challenging aspect of managing this request?

ASome of the visitor's data is synthetic data that the company does not have to provide to the data subject.

BThe data subject's data is structured data that can be searched, compiled and reviewed only by an automated tool.

CThe data subject is not entitled to receive a copy of their data because some of it was scraped from public sources.

DSome of the data subject's data is unstructured data and you cannot untangle it from the other data, including information about other individuals.

Show Suggested Answer

Suggested Answer: D

The most challenging aspect of managing a data access request in this scenario is dealing with unstructured data that cannot be easily disentangled from other data, including information about other individuals. Unstructured data, such as free-text inputs or social media posts, often lacks a clear structure and may be intermingled with data from multiple individuals, making it difficult to isolate the specific data related to the requester. This complexity poses significant challenges in complying with data access requests under privacy laws. Reference: AIGP Body of Knowledge on Data Subject Rights and Data Management.

by Francesco at Jan 13, 2025, 08:34 PM

Limited Time Offer

25%

Off

Get Premium AIGP Questions as Interactive Web-Based Practice Test or PDF