AAISM: Advanced in AI Security Management

By Isaca · Question Mode

QuestionQ84

AI Risk Management

An organization intends to use a natural language processing (NLP) system that processes and analyzes sensitive data. The data science team has suggested retaining all raw text data indefinitely for possible model enhancements and further analytics. Which of the following is the BEST course of action?

Explanation

Data-retention periods should be tied to a specified, legitimate purpose and limited to what is necessary. Retaining sensitive raw text indefinitely for possible future uses conflicts with purpose limitation, data minimization, and storage-limitation principles. Privacy techniques, encryption, and third-party storage do not replace a justified retention schedule.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!