Question 10
Domain 2: Privacy Risk ManagementA company deploys an AI tool that summarizes employee chats and flags 'disengaged' workers for manager review. What is the strongest privacy concern?
Correct answer: B
Explanation
The main privacy concern is opaque profiling: the tool infers a worker’s status from chat summaries and flags them for review without clear, meaningful context. Privacy rules and fairness principles require people to understand and challenge automated inferences that may affect them, especially when those inferences can influence employment decisions.
Why each option is right or wrong
A. The cloud bill may increase unexpectedly
B. Opaque profiling could affect people without meaningful context or challenge
The strongest concern is the creation of an inferred employment profile from employee communications, which can trigger decisions without transparency or a real opportunity to contest the inference. Under GDPR Articles 13–15, individuals must be told about the existence of automated processing and the logic involved, and Article 22 restricts decisions based solely on automated processing that produce legal or similarly significant effects; if the flag is used in performance or disciplinary review, the worker needs meaningful information and a chance to obtain human intervention and challenge the result. The problem is not the summarization itself, but the opaque inference of “disengagement” from chat data, which can affect employment treatment without adequate context or procedural safeguards.
C. The office printers are not centrally managed
D. The system uses too many dashboard colors