AI-900 Question 56
Select 3An organization is developing an AI-powered chatbot to handle customer inquiries. The chatbot collects user data, including personal information like names and email addresses, to provide personalized responses. Which considerations should the organization prioritize to ensure privacy and security in their AI solution?
- A
Implement data encryption for both data in transit and at rest.
- B
Ensure the chatbot model does not store or process user data locally on client devices.
- C
Comply with relevant regulations such as GDPR or CCPA for data handling.
- D
Collect as much user data as possible to improve the accuracy of the chatbot's responses.
- E
Regularly audit and monitor the AI system for potential security vulnerabilities.
Show answer and explanation
Correct answers: A, C, E
Explanation
Privacy and security considerations in AI solutions involve protecting user data and ensuring compliance with regulations. Encrypting data, adhering to privacy laws, and auditing the system for vulnerabilities are key practices. Collecting excessive data contradicts privacy principles, and processing data locally is not inherently a security measure but should align with the system's architecture.
- A. Correct.
Data encryption is critical to protecting sensitive information from unauthorized access during transmission and storage. It is a fundamental security measure.
- B. Incorrect.
While processing user data locally may be a design choice, it is not inherently a privacy or security risk. However, the decision should align with the organization's architecture and compliance requirements.
- C. Correct.
Adhering to data privacy regulations like GDPR (General Data Protection Regulation) or CCPA (California Consumer Privacy Act) is essential to ensure legal compliance when handling personal data.
- D. Incorrect.
Collecting excessive user data violates data minimization principles, a key aspect of privacy regulations. Collect only the data necessary to achieve the intended purpose.
- E. Correct.
Regular audits and monitoring can identify vulnerabilities, unauthorized access, or misuse, which are critical for maintaining the security of the AI system.