Question 1 of 10 · Understanding the foundations of AI governance
Why does AI governance overlap so much with privacy programs?
Personal data runs through training, inference and outputs, so privacy assessments, rights and minimization apply to many AI uses. Privacy law does not ban AI, privacy teams rarely build models, and neither program replaces the other.
Question 2 of 10 · Understanding how laws, standards and frameworks apply to AI
What is the highest maximum fine under the EU AI Act, and for what?
Prohibited-practice violations carry the top tier: up to 35 million euros or 7% of worldwide annual turnover, whichever is higher. Lower tiers apply to other breaches; 20 million or 4% is the GDPR's top tier.
Question 3 of 10 · Understanding how to govern AI development
A developer wants to use customer support transcripts to train a model. What should be checked first?
Reusing personal data for training requires a lawful basis and compatibility with the original purpose and notices. Format, speed and vendor advice are not the test.
Question 4 of 10 · Understanding how to govern AI deployment and use
Before deploying a vendor's AI system, what should the deployer confirm?
Using a system outside its intended use invalidates the vendor's testing and can create new risks. Popularity, design and price are not readiness criteria.
Question 5 of 10 · Understanding the foundations of AI governance
What should an AI policy say about third-party AI tools?
Policy should route third-party tools through assessment and approval. Blanket bans drive shadow use, and reviews or price are not risk criteria.
Question 6 of 10 · Understanding how laws, standards and frameworks apply to AI
Who is a deployer under the EU AI Act?
A deployer uses an AI system under its authority in a professional context. The developer that places it on the market is the provider, authorities supervise, and affected persons are not operators.
Question 7 of 10 · Understanding how to govern AI development
Why is removing names and IDs often not enough to anonymize training data?
Quasi-identifiers such as birth date, postcode and gender can single people out when combined. Anonymization must account for linkage risk, not just direct identifiers.
Question 8 of 10 · Understanding how to govern AI deployment and use
Which contract term protects a buyer whose data an AI vendor might use to train its models?
Restricting data use to service delivery, with no training on customer data unless agreed, protects confidential and personal data. Currency, location and marketing clauses do not.
Question 9 of 10 · Understanding the foundations of AI governance
Which factor most increases the risk of an AI use case?
Decisions affecting access to opportunities or essential services carry high potential for harm, which is why many laws treat them as high-risk. Hosting and build choices are secondary.
Question 10 of 10 · Understanding how laws, standards and frameworks apply to AI
Under the EU AI Act, which deployers must carry out a fundamental rights impact assessment?
Article 27 applies to public bodies, private entities providing public services, and deployers using AI for creditworthiness or life and health insurance pricing. It is not universal and does not target providers.
0 of 10
Understanding the foundations of AI governance
Understanding how laws, standards and frameworks apply to AI
Understanding how to govern AI development
Understanding how to govern AI deployment and use
Which domains cost you the points? Members see a breakdown by domain and a study plan built from it.