AAIA: Advanced in AI Audit

By Isaca · Question Mode

QuestionQ62

AI Governance and Risk

An organization uses an AI-driven chatbot that gathers customer data during interactions. Which of the following is MOST important for ensuring compliance with data-consent requirements?

Explanation

A consent mechanism presented before personal-data collection can give users clear, informed options and capture an affirmative choice. Valid consent requires a genuine choice, clear information, and a positive opt-in action; data-retention or anonymization practices do not replace consent where consent is the applicable lawful basis.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!