Question 22
IIAn organization deploys an AI system that processes personal data to generate predictions about individuals. Based on the source material, how should existing data privacy laws be treated in relation to this AI processing activity?
Correct answer: B
Explanation
Existing data privacy laws apply to AI systems when those systems process personal data, so AI activities should be evaluated under the same legal privacy obligations that govern other personal-data processing. — aigp-study-guide-2026.pdf
Why each option is right or wrong
A. They apply only if the AI system makes fully automated final decisions without human involvement.
Data privacy laws apply to AI-related processing activities generally, not only to fully automated decisions.
B. They apply to the AI system’s processing of personal data as an existing data privacy law issue.
The source material states that existing data privacy laws apply to AI systems and AI-related processing activities. Because the system in the scenario processes personal data to generate predictions, that activity falls within the application of existing data privacy laws.
C. They do not apply unless a new AI-specific privacy statute has been enacted for that use case.
Existing data privacy laws already apply to AI systems and AI-related processing activities.
D. They apply only to the training phase of the AI model, not to later use of the model on personal data.
The material covers AI systems and AI-related processing activities, not only model training.