QuestionQ23

AI Governance and Risk

An IS auditor is assessing an AI application that uses customer data to improve the organization's marketing-outreach strategies. Which of the following should be the auditor's PRIMARY focus during this assessment?

Explanation

Using customer data to develop marketing strategies requires compliance with applicable privacy regulations governing the lawful collection and use of personal data, including any requirements for transparency, consent or other lawful bases, purpose limitation, and data-subject rights. Access controls and breach-escalation processes are important safeguards, but privacy compliance is the primary concern for this use of customer data.

Community Discussion

No comments yet. Be the first to start the discussion!