Discuss IAPP CIPP/US Exam Topic 5 Question 4

Acme Student Loan Company has developed an artificial intelligence algorithm that determines whether an individual is likely to pay their bill or default. A person who is determined by the algorithm to be more likely to default will receive frequent payment reminder calls, while those who are less likely to default will not receive payment reminders.

Which of the following most accurately reflects the privacy concerns with Acme Student Loan Company using

artificial intelligence in this manner?

AIf the algorithm uses risk factors that impact the automatic decision engine. Acme must ensure that the algorithm does not have a disparate impact on protected classes in the output.

BIf the algorithm makes automated decisions based on risk factors and public information, Acme need not determine if the algorithm has a disparate impact on protected classes.

CIf the algorithm's methodology is disclosed to consumers, then it is acceptable for Acme to have a disparate impact on protected classes.

DIf the algorithm uses information about protected classes to make automated decisions, Acme must ensure that the algorithm does not have a disparate impact on protected classes in the output.

Suggested Answer: B

Get Premium CIPP/US Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

14 comments · newest first

Deonna 1 year ago

Not sure if disclosing the methodology really solves the problem.

Nana 1 year ago

Definitely concerned about the impact on protected classes.

Helene 1 year ago

Wait, can they really use AI like this without consequences?

Moira 1 year ago

I think option A makes the most sense here.

Jani 1 year ago

Sounds like a recipe for discrimination.

Tonette 1 year ago

I’m a bit confused about the implications of public information in this context. I thought that if it’s public, it might not matter, which makes me hesitate on option B.

Sanda 1 year ago

This question seems similar to one we practiced about algorithmic bias. I think we concluded that transparency alone isn't enough, so I’m leaning towards A or D.

Elizabeth 1 year ago

I remember discussing how algorithms can unintentionally discriminate against protected classes. I think option A might be the right choice.

Louann 1 year ago

I'm not entirely sure, but I feel like the focus should be on whether the algorithm uses protected class information. Maybe option D is the one?

Adolph 1 year ago

Okay, the question is asking about how the route was learned. I think I know the difference between single-hop, multi-hop, and multipath BGP, so I should be able to identify the correct statement.

Casandra 1 year ago

I'm a little confused on this question. I know GDPR has a lot of requirements, and I'm not sure I have all the details memorized. I'll try to reason through the options and see if I can eliminate any.

Ashlee 1 year ago

Okay, I think I've got it. The key difference is that a penetration test actually tries to exploit the vulnerabilities, rather than just identifying them. That hands-on approach makes it a more comprehensive assessment of the system's security.

Kerrie 1 year ago

Whoa, this is a tricky one. There are a lot of different tasks that certificate authorities handle. I'm not 100% sure which one is considered their "general" responsibility. I'll have to make an educated guess here.

Laurel 1 year ago

This is a tricky one. I remember learning about the recognizeText command, but I can't recall the specific source types. I'll have to review my notes before answering this.

IAPP CIPP/US Exam - Topic 5 Question 4 Discussion