QuestionQ192

Privacy Operational Lifecycle: Assess

What is the first action an organization should take when considering the use of a third party’s AI-based resume-ranking tool?

  • A Secure stakeholder buy-in and approval to ensure the tool meets the organization's requirements.
  • B Conduct an assessment of the tool's impact both on privacy and on conformity with applicable AI regulation.
  • C Distribute a notice to the candidates whose resumes the too! will assess to ensure they understand and consent to the use of the tool.
  • D Secure appropriate contractual concessions to ensure that the developer is primarily responsible for any violation of applicable privacy law.
Explanation

AI-based recruitment and resume-ranking systems can create substantial privacy, discrimination, and automated-decision risks. A privacy and regulatory impact assessment performed before procurement identifies those risks and the controls required for lawful deployment; stakeholder approval, candidate notices, and contractual allocation of responsibilities follow from that assessment.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!