IAPP Exam AIGP Topic 7 Question 12 Discussion

Actual exam question for IAPP's AIGP exam

Question #: 12
Topic #: 7

You are a privacy program manager at a large e-commerce company that uses an Al tool to deliver personalized product recommendations based on visitors' personal information that has been collected from the company website, the chatbot and public data the company has scraped from social media.

A user submits a data access request under an applicable U.S. state privacy law, specifically seeking a copy of their personal data, including information used to create their profile for product recommendations.

What is the most challenging aspect of managing this request?

ASome of the visitor's data is synthetic data that the company does not have to provide to the data subject.

BThe data subject's data is structured data that can be searched, compiled and reviewed only by an automated tool.

CThe data subject is not entitled to receive a copy of their data because some of it was scraped from public sources.

DSome of the data subject's data is unstructured data and you cannot untangle it from the other data, including information about other individuals.

Show Suggested Answer

Suggested Answer: D

The most challenging aspect of managing a data access request in this scenario is dealing with unstructured data that cannot be easily disentangled from other data, including information about other individuals. Unstructured data, such as free-text inputs or social media posts, often lacks a clear structure and may be intermingled with data from multiple individuals, making it difficult to isolate the specific data related to the requester. This complexity poses significant challenges in complying with data access requests under privacy laws. Reference: AIGP Body of Knowledge on Data Subject Rights and Data Management.

by Zona at Sep 11, 2024, 06:43 PM

Limited Time Offer

25%

Off

Get Premium AIGP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tawny

2 months ago

Oh man, this whole scenario sounds like a privacy nightmare! I bet the poor privacy manager is just sitting there, staring at a mountain of data, trying to figure out how to untangle it all. Good luck with that one!

upvoted 0 times

...

Cherilyn

2 months ago

I think the unstructured data that cannot be untangled is also a major challenge in managing this request.

upvoted 0 times

...

Reita

2 months ago

Seriously, who thought it was a good idea to scrape data from social media? That's just asking for trouble. I guess option C is the easy way out, but that's not very ethical, is it?

upvoted 0 times

Alishia

1 months ago

A: Option C does seem like the easy way out, but it may not be the most ethical choice.

upvoted 0 times

...

Belen

1 months ago

B: Yeah, it definitely raises ethical concerns.

upvoted 0 times

...

Louvenia

1 months ago

A: I agree, scraping data from social media seems risky.

upvoted 0 times

...

Glendora

2 months ago

Yes, that's a good point. It can be difficult to ensure the accuracy and completeness of the data provided.

upvoted 0 times

...

Estrella

3 months ago

I believe the structured data that can only be reviewed by an automated tool is also a challenge.

upvoted 0 times

...

Dacia

3 months ago

Hmm, I'm not sure about that synthetic data bit. Sounds like a sneaky way to avoid handing over the full scoop. I'd go with option D - you can't just cherry-pick what to give the data subject, it's all or nothing!

upvoted 0 times

Louis

2 months ago

Exactly, transparency is key when it comes to handling data access requests.

upvoted 0 times

...

Amira

2 months ago

I agree, it's important to provide all the data to the user, even if it's unstructured.

upvoted 0 times

...

Sharee

2 months ago

Option D) Some of the data subject's data is unstructured data and you cannot untangle it from the other data, including information about other individuals.

upvoted 0 times

...

Norah

2 months ago

True, it's a complex situation to navigate. Balancing privacy rights with data access requests can be tricky, especially when dealing with different types of data.

upvoted 0 times

...

Deonna

2 months ago

That's a good point. It's definitely a challenge to untangle the data and ensure that only the data subject's information is provided. It's a delicate balance between privacy and transparency.

upvoted 0 times

...

Michael

3 months ago

But what if the unstructured data includes information about other individuals? Wouldn't that be a privacy concern to share that with the data subject?

upvoted 0 times

...

Louvenia

3 months ago

I agree, it does seem like they are trying to avoid providing all the data. Option D does make sense, it's important to provide all the information, even if it's mixed with other data.

upvoted 0 times

...

Cherilyn

3 months ago

I agree, it can be tricky to determine what data we are required to provide to the data subject.

upvoted 0 times

...

Jamey

3 months ago

Oh boy, this is a tricky one. I bet the most challenging part is trying to untangle all that unstructured data without revealing other people's info. Privacy laws can be such a headache!

upvoted 0 times

Devon

2 months ago

B) The data subject's data is structured data that can be searched, compiled and reviewed only by an automated tool.

upvoted 0 times

...

German

3 months ago

A) Some of the visitor's data is synthetic data that the company does not have to provide to the data subject.

upvoted 0 times

...

Glendora

3 months ago

I think the most challenging aspect is dealing with synthetic data that we don't have to provide.

upvoted 0 times

...