IAPP AIGP Exam Questions
Artificial Intelligence Governance Professional (Page 7 )

Updated On: 21-Feb-2026

According to the GDPR's transparency principle, when an AI system processes personal data in automated decision-making, controllers are required to provide data subjects specific information on?

  1. The existence of automated decision-making and meaningful information on its logic and consequences.
  2. The personal data used during processing, including inferences drawn by the AI system about the data.
  3. The data protection impact assessments carried out on the AI system and legal bases for processing.
  4. The contact details of the data protection officer and the data protection national authority.

Answer(s): A

Explanation:

GDPR's transparency principle mandates that data subjects be informed about the existence of automated decision-making, along with meaningful information about the logic involved and the potential consequences.



A company subject to GDPR is building its governance framework for how it will collect data to be used for training of AI models.

The most important thing the company can do to ensure GDPR compliance is:

  1. Include the requirement to fully anonymize data used to train its models.
  2. Establish a data retention schedule for data used to train its models.
  3. Source training data from a reputable company to train its models.
  4. Minimize the amount of data used to train its models.

Answer(s): D

Explanation:

Minimizing the amount of personal data used in training supports GDPR's data minimization principle, reducing privacy risks and improving compliance.



Under the EU AI Act, which of the following compliance actions applies only to General Purpose AI models with systemic risk?

  1. Publishing a detailed summary of the data used to train the model.
  2. Maintaining up-to-date technical documentation, including testing details.
  3. Implementing an intellectual property policy to comply with EU copyright laws.
  4. Making information available to downstream providers who integrate the model into their AI systems.

Answer(s): A

Explanation:

Under the EU AI Act, General-Purpose AI models with systemic risk are required to publish a detailed summary of the data used to train the model. This transparency measure ensures that users and regulatory bodies can assess the model's data sources and potential biases.



Which of the following situations would be least likely to raise concerns under existing consumer protection laws?

  1. An AI algorithm being used in a credit decision making process by a financial institution.
  2. An AI customer service system claiming that it is as accurate as a human support agent.
  3. An AI tool using scraped digital content to generate news summaries on a publishing website.
  4. An online platform offering recommendations to its users by displaying user specific content and targeted advertisements.

Answer(s): D

Explanation:

Online platforms displaying user-specific content and targeted ads are common and generally accepted practices, making them least likely to raise concerns under consumer protection laws compared to the other scenarios involving more direct consumer impact or claims.



What is the primary reason the EU is considering updates to its Product Liability Directive?

  1. To increase the minimum warranty level for defective goods.
  2. To define new liability exemptions for defective products.
  3. To address digital services and connected products.
  4. To address free and open-source software.

Answer(s): C

Explanation:

The EU's update to the Product Liability Directive primarily aims to address the challenges posed by digital services and connected products, ensuring that liability rules are fit for purpose in the digital age and the circular economy.






Post your Comments and Discuss IAPP AIGP exam dumps with other Community members:

Join the AIGP Discussion