AI-900 Question 57
Select 3You are developing an AI solution that processes sensitive customer data, such as personally identifiable information (PII). Which of the following actions should you take to ensure privacy and security in your AI solution?
- A
Implement data encryption for both data in transit and at rest.
- B
Ensure datasets used for training are anonymized to remove any identifiable information.
- C
Allow unrestricted access to the AI solution to improve usability.
- D
Perform a risk assessment and comply with relevant data protection regulations such as GDPR.
- E
Store all customer data indefinitely to enable future use of the AI model.
Show answer and explanation
Correct answers: A, B, D
Explanation
To ensure privacy and security in an AI solution, it is essential to encrypt sensitive data, anonymize training datasets to prevent exposing identifiable information, and comply with relevant data protection regulations. Allowing unrestricted access or storing data indefinitely introduces security risks and violates best practices for privacy.
- A. Correct.
Implementing data encryption ensures that sensitive information is protected both during transfer and while stored, reducing the risk of unauthorized access.
- B. Correct.
Anonymizing datasets prevents the AI solution from inadvertently exposing sensitive or identifiable information about individuals.
- C. Incorrect.
Allowing unrestricted access poses a significant risk to security, as unauthorized users could access sensitive data or misuse the AI solution.
- D. Correct.
Conducting a risk assessment and adhering to regulations like GDPR ensures that the AI solution complies with legal requirements and safeguards user privacy.
- E. Incorrect.
Storing data indefinitely is a poor practice as it increases risk of exposure and may violate data retention policies outlined in regulations like GDPR.