Google Professional Machine Learning Engineer Question 127
Select 4Google Cloud PlatformYour company is building a machine learning model to predict customer behavior using sensitive user data, such as health records and financial information. To ensure compliance with privacy regulations and best practices, which of the following actions should you take?
- A
Implement data encryption for both data in transit and at rest.
- B
Minimize data collection by only gathering features strictly necessary for the model.
- C
Share the raw dataset with the data science team to ensure accurate feature engineering.
- D
Anonymize sensitive data wherever possible before using it in the model.
- E
Ensure compliance with relevant regulations such as GDPR or HIPAA, depending on the region.
Show answer and explanation
Correct answers: A, B, D, E
Explanation
To ensure the responsible handling of sensitive user data and compliance with privacy regulations, organizations should implement encryption to safeguard data, minimize data collection, anonymize sensitive information, and adhere to regional regulatory requirements. Sharing raw datasets containing sensitive information should be avoided to reduce the risk of data exposure.
- A. Correct.
Encrypting data in transit and at rest is a fundamental security measure to protect sensitive data from unauthorized access and is necessary for compliance with most privacy regulations.
- B. Correct.
Collecting only the data strictly necessary for the model adheres to the principle of data minimization, which is a key requirement in privacy regulations such as GDPR.
- C. Incorrect.
Sharing raw datasets containing sensitive data increases the risk of a data breach and violates privacy best practices. The data should be anonymized or handled with strict access controls.
- D. Correct.
Anonymizing sensitive data reduces the risk of exposing personally identifiable information (PII) and aligns with privacy best practices and many regulatory requirements.
- E. Correct.
Compliance with region-specific regulations (e.g., GDPR in Europe or HIPAA in the U.S.) is mandatory when dealing with sensitive information, as these laws dictate how data should be collected, stored, and processed.