What does GDPR require in relation to automated decision-making by AI systems?

human oversight must be included and individuals can challenge decisions

According to Article 3 of the GDPR, when does the regulation apply to organizations outside of the EU? WHEN:

They offer goods or services to people in the EU or monitor online behavior

What is the primary purpose of the GDPR?

To protect personal data and privacy rights of individuals in the EU

Why is informed consent a challenge in the context of IoT?

Many IoT devices have no or limited user interfaces

What is a key reason why blockchain technology conflicts with GDPR’s data minimization principle?

It records and replicates transactions permanently across multiple node

What is a key security risk of IoT devices under GDPR?

Weak device-level security making personal data vulnerable

What does the term "black box" in AI refer to?

AI systems that make decisions without showing how those decision were made

What is the main conflict between blockchain technology and GDPR's "Right to be Forgotten"?

Blockchain is immutable, data cannot be modified or deleted

What is the main purpose of a DPIA (Data Protection Impact Assessment)?

To identify and minimize privacy risks before data processing begins

studbud

GDPR & AI& loT& Blockchain

10 termsStudBud Administration10 plays

Imported from external platform

Flashcards10 cardsFPractice quizPHost liveL

Questions 10

Answers

1
What does GDPR require in relation to automated decision-making by AI systems?
That automated decisions should never be allowed
That automated decisions must be done anonymously
That only robots are allowed to make decisions
human oversight must be included and individuals can challenge decisions
2
Which GDPR principle requires that personal data be collected and processed only for the specified purpose?
Integrity and confidentiality
Purpose limitation
Transparency
Data portability
3
According to Article 3 of the GDPR, when does the regulation apply to organizations outside of the EU? WHEN:
They store data on servers within the EU
They operate a website available in multiple languages
They have an office in the EU, regardless of their business activities
They offer goods or services to people in the EU or monitor online behavior
4
What is the primary purpose of the GDPR?
To protect personal data and privacy rights of individuals in the EU
To regulate cryptocurrency transactions
To protect personal data and privacy rights of individuals worldwide
To protect personal data and privacy rights of individuals in the USA
5
Why is informed consent a challenge in the context of IoT?
IoT devices don’t need to collect personal data
Consent is not required under GDPR for IoT devices
Many IoT devices have no or limited user interfaces
Most users refuse to provide consent
6
What is a key reason why blockchain technology conflicts with GDPR’s data minimization principle?
Blockchain encrypts all personal data before storing it
Blockchain prevents any access to personal data
It records and replicates transactions permanently across multiple node
Blockchain only allows data storage for a limited time
7
What is a key security risk of IoT devices under GDPR?
Too many software updates
Excessive battery consumption
Data is stored only offline and can't be protected
Weak device-level security making personal data vulnerable
8
What does the term "black box" in AI refer to?
AI systems that make decisions without showing how those decision were made
AI systems with no internet connectivity
AI systems that are used only in cybersecurity
AI systems that are controlled by external users
9
What is the main conflict between blockchain technology and GDPR's "Right to be Forgotten"?
GDPR does not recognize blockchain as a valid technology
Blockchain allows users to erase their transaction history at any time
Blockchain is immutable, data cannot be modified or deleted
The GDPR does not apply to decentralized networks
10
What is the main purpose of a DPIA (Data Protection Impact Assessment)?
To test the performance of AI systems
To identify and minimize privacy risks before data processing begins
To monitor network activity in real-time
To check the energy efficiency of smart devices

GDPR & AI& loT& Blockchain Flashcards | StudBud