IAPP AIGP - Artificial Intelligence Governance Professional
CASE STUDY
A global marketing agency is adapting a large language model ( " LLM " ) to generate content for an upcoming marketing campaign for a client ' s new product: a hard hat designed for construction workers of any gender to better protect them from head injuries.
The marketing agency is accessing the LLM through an application programming interface ( " API " )developed by a third-party technology company. They want to generate text to be used for targeted advertising communications that highlight the benefits of the hard hat to potential purchasers. Both the marketing agency and the technology company have taken reasonable steps to address Al governance.
The marketing company has:
•          Entered into a contract with the technology company with suitable representations and warranties.
•          Completed an impact assessment on the LLM for this intended use.
•          Built technical guidance on how to measure and mitigate bias in the LLM.
•          Enabled technical aspects of transparency, explainability, robustness and privacy.
•          Followed applicable regulatory requirements.
•          Created specific legal statements and disclosures regarding the use of the Al on its client ' s advertising.
The technology company has:
•          Provided guidance and resources to developers to address environmental concerns.
•          Build technical guidance on how to measure and mitigate bias in the LLM.
•          Provided tools and resources to measure bias specific to the LLM.
•          Enabled technical aspects of transparency, explainability, robustness and privacy.
•          Mapped and mitigated potential societal harms and large-scale impacts.
•          Followed applicable regulatory requirements and industry standards.
•          Created specific legal statements and disclosures regarding the LLM. including with respect to IP and rights to data.
The agency has taken governance actions such as:
Conducting an impact assessment
Providing legal disclosures
Enabling bias mitigation and explainability
Complying with regulatory requirements
Which of the following should be included in the marketing company’s disclosures about the use of the LLM EXCEPT?
Which of the following is a foundational characteristic of effective AI governance?
A company that deploys AI but is not currently a provider or developer intends to develop and market its own AI system.
Which obligation would then be likely to apply?
Retraining an LLM can be necessary for all of the following reasons EXCEPT?
CASE STUDY
A global marketing agency is adapting a large language model ( " LLM " ) to generate content for an upcoming marketing campaign for a client ' s new product: a hard hat designed for construction workers of any gender to better protect them from head injuries.
The marketing agency is accessing the LLM through an application programming interface ( " API " ) developed by a third-party technology company. They want to generate text to be used for targeted advertising communications that highlight the benefits of the hard hat to potential purchasers. Both the marketing agency and the technology company have taken reasonable steps to address Al governance.
The marketing company has:
•          Entered into a contract with the technology company with suitable representations and warranties.
•          Completed an impact assessment on the LLM for this intended use.
•          Built technical guidance on how to measure and mitigate bias in the LLM.
•          Enabled technical aspects of transparency, explainability, robustness and privacy.
•          Followed applicable regulatory requirements.
•          Created specific legal statements and disclosures regarding the use of the Al on its client ' s advertising.
The technology company has:
•          Provided guidance and resources to developers to address environmental concerns.
•          Build technical guidance on how to measure and mitigate bias in the LLM.
•          Provided tools and resources to measure bias specific to the LLM.
•          Enabled technical aspects of transparency, explainability, robustness and privacy.
•          Mapped and mitigated potential societal harms and large-scale impacts.
•          Followed applicable regulatory requirements and industry standards.
•          Created specific legal statements and disclosures regarding the LLM. including with respect to IP and rights to data.
Â
Which stakeholder is responsible for the lawful collection of data used to train the foundational AI model?
CASE STUDY
A company is considering the procurement of an AI system designed to enhance the security of IT infrastructure. The AI system analyzes how users type on their laptops, including typing speed, rhythm and pressure, to create a unique user profile. This data is then used to authenticate users and ensure that only authorized personnel can access sensitive resources.
All of the following are obligations of the company as a data controller when implementing its AI system EXCEPT?
All of the following issues are unique for proprietary AI model deployments EXCEPT?
CASE STUDY
Please use the following answer the next question:
A local police department in the United States procured an Al system to monitor and analyze social media feeds, online marketplaces and other sources of public information to detect evidence of illegal activities (e.g., sale of drugs or stolen goods). The Al system works by surveilling the public sites in order to identify individuals that are likely to have committed a crime. It cross-references the individuals against data maintained by law enforcement and then assigns a percentage score of the likelihood of criminal activity based on certain factors like previous criminal history, location, time, race and gender.
The police department retained a third-party consultant assist in the procurement process, specifically to evaluate two finalists. Each of the vendors provided information about their system ' s accuracy rates, the diversity of their training data and how their system works. The consultant determined that the first vendor’s system has a higher accuracy rate and based on this information, recommended this vendor to the police department.
The police department chose the first vendor and implemented its Al system. As part of the implementation, the department and consultant created a usage policy for the system, whichincludes training police officers on how the system works and how to incorporate it into their investigation process.
The police department has now been using the Al system for a year. An internal review has found that every time the system scored a likelihood of criminal activity at or above 90%, the police investigation subsequently confirmed that the individual had, in fact, committed a crime. Based on these results, the police department wants to forego investigations for cases where the Al system gives a score of at least 90% and proceed directly with an arrest.
What is the best reason the police department should continue to perform investigations even if the Al system scores an individual ' s likelihood of criminal activity at or above 90%?
What type of organizational risk is associated with Al ' s resource-intensive computing demands?
Scenario:
An organization is planning to deploy a new internal application that uses AI to make automated decisions about individuals. This application will process personal information and may affect individuals’ access to certain benefits or opportunities.
Which of the following documents must be updated to ensure transparency?
