Isaca CDPSE Exam - Topic 3 Question 75 Discussion

Actual exam question for Isaca's CDPSE exam

Question #: 75
Topic #: 3

[All CDPSE Questions]

Which of the following is the MOST important consideration when processing personal data for an AI project?

CImplementing encryption techniques to protect personal data

DCollecting aggregated data to improve AI model performance

AEstablishing the appropriate legal basis before processing personal data

BLeveraging AI algorithms to inform data processing controls

Show Suggested Answer

Suggested Answer: A

Before any processing, CDPSE stresses lawfulness: identify and document the appropriate legal basis and processing purpose(s). Security controls (C), algorithmic techniques (B), and aggregation (D) are important but secondary to establishing a lawful basis and purpose limitation.

Key CDPSE-aligned phrasing (short extract): ''Processing requires a lawful basis and defined purposes prior to collection/use.''

by Barbra at Jan 27, 2026, 10:52 AM

Limited Time Offer

25%

Off

Get Premium CDPSE Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Enola

5 days ago

I remember a practice question that emphasized the importance of ethical guidelines in AI. Is that what they mean by processing personal data?

upvoted 0 times

...

Elise

10 days ago

I think the most important consideration is definitely data privacy, but I'm not entirely sure how it compares to consent.

upvoted 0 times

...

Jackie

15 days ago

For an AI project, I'd say the top priority has to be data security and protecting people's sensitive information. Gotta make sure that data is kept safe and confidential.

upvoted 0 times

...

Elli

20 days ago

Honestly, I'm a bit unsure about this. There are so many important factors to weigh when it comes to personal data and AI. I'll have to review my notes carefully.

upvoted 0 times

...

An

25 days ago

Ooh, this is a good one. I'd say the most important thing is getting informed consent from individuals whose data is being used. Gotta respect people's privacy rights.

upvoted 0 times

...

Weldon

1 month ago

Hmm, this is a tricky one. I'd need to really think through the different factors at play here - legal, ethical, technical, and so on. Lots to consider.

upvoted 0 times

...

Sharen

1 month ago

I think the most important consideration would be ensuring compliance with relevant data privacy regulations. That's going to be crucial for any AI project handling personal data.

upvoted 0 times

...