Module 4 self-check | AI GRCA Practitioner Programme

Why does this course emphasise that 'AI law is broader than privacy'?

Because other legal domains are always less important than privacyBecause privacy law is the only relevant domain in practiceBecause IP, equality, consumer, contract, liability and sector law can all independently create AI risk, beyond data protectionBecause privacy law doesn't apply to AI at all

'Credit and lending fairness' as a legal concern most directly relates to:

Equal and fair treatment of applicants in automated credit or lending decisionsOnly cybersecurity practicesOnly data retention periodsOnly marketing content

Sector regulation for a financial services AI tool would most likely add requirements around:

Only employment contractsOnly general marketing practices with no sector specificityFinancial-services-specific obligations, such as fair lending or model risk management practicesOnly physical workplace safety

'Professional negligence' is most relevant to AI when:

Only applies to unpaid workOnly applies to open-source AIA professional (e.g. adviser) relies on AI output without appropriate care, causing harm through a failure of professional dutyOnly when no AI is involved at all

An AI product giving unsafe advice (e.g. on medication dosage) primarily engages which combination of legal domains?

Only procurement lawOnly database rightsProduct liability and health and safety law togetherOnly trade secrets

Why does 'record keeping' matter as a distinct legal concern for AI systems?

Record keeping is purely a matter of internal preference with no external requirement everOnly applies to financial services firmsRecords are never legally relevantCertain legal and regulatory obligations require retaining specific records or evidence of decisions and processes

A supplier's model was trained on scraped web content without clear licensing. This primarily raises a concern under:

Only procurement lawOnly health and safety lawCopyright and training data lawOnly employment law

Why is a privacy review alone insufficient for a generative marketing tool?

Only cybersecurity mattersPrivacy law covers everything alreadyIP, consumer protection, equality and contract risks can arise independently of data protectionMarketing content can't create legal risk

AI and the Wider Legal Landscape