CASE STUDY
Please use the following to answer the next question:
A small local flower delivery company operates a few stores and has a limited IT budget. To reduce the time spent on customer service, which is a major drain on employee time, the company plans to implement a simple but high-performance generative AI chatbot on its website. The chatbot will provide real-time, fact-based responses to customer inquiries and assist with order processing, helping to reduce incoming phone calls.
The company currently uses a single on-premises server for its order database and email system and has not yet partnered with a cloud provider.
An internal data privacy policy governs the use of customer dat
a. This policy, written before the adoption of AI, allows the use or transfer of customer data beyond name and contact information but requires that all such data be deleted after the order is completed. The company prefers to maintain this policy without changes.
MULTI-SELECT
Please select 3 of the 5 options below. No partial credit will be given.
Which of the following actions would necessitate a change to the company's privacy policy?
The processes and methods that allow human users to understand and trust the outputs produced by AI are important in addressing which key regulatory concern?
Under the NIST Al Risk Management Framework, all of the following are defined as characteristics of trustworthy Al EXCEPT?
CASE STUDY
Please use the following to answer the next question:
A mid-size US healthcare network has decided to develop an AI solution to detect a type of cancer that is most likely to arise in adults. Specifically, the healthcare network intends to create a recognition algorithm that will perform an initial review of all imaging and then route records to a radiologist for secondary review pursuant to agreed-upon criteria (e.g., a confidence score below a threshold).
To date, the healthcare network has:
- Defined its AI ethical principles.
- Conducted discovery to identify the intended uses and success
criteria for the system.
- Established an AI risk committee.
- Assembled a cross-functional team with clear roles and
responsibilities.
- Created policies and procedures to document standards, workflows,
timelines and risk thresholds during the project.
The healthcare network intends to retain a cloud provider to host the solution. It also intends to retain a large consulting firm to supplement its small data science team and help develop the algorithm using the healthcare network's existing data and de-identified data that is licensed from a large US clinical research partner.
In the design phase, which of the following steps is most important in gathering the data from the clinical research partner?
A company has trained an ML model primarily using synthetic data, and now intends to use live personal data to test the model.
Which of the following is NOT a best practice apply during the testing?
