Retain diagnostic logs with restricted access: What is the decisive governance issue?
Useful logs still require minimization, restricted access, and defined retention when prompts contain sensitive information.
The question
A retail demand-planning assistant logs prompts to diagnose forecasting errors. Analysts discover that prompts contain store-level sales notes naming employees' medical restrictions. The logs are useful for debugging, but access is broad and retention has not been defined. What is the decisive governance issue?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Move the logs to a separate analytics platform while leaving access unchanged.Relocation does not reduce exposure when broad access and undefined retention remain, and it does not minimize sensitive content.
- Keep unrestricted logs indefinitely because complete context is needed to debug forecasting errors.Debugging value does not justify unrestricted access or indefinite retention of sensitive medical information.
- Disable prompt logging.Disabling logs may remove useful diagnostic evidence without addressing whether proportionate logging can be designed safely.
- Retain diagnostic logs with restricted access and a defined retention period. ✓The useful monitoring purpose can be preserved while controlling exposure through access restrictions and defined retention; sensitive content should also be minimized.
The trap
Do not equate monitoring value with unrestricted collection; examine content sensitivity, access, and retention together. How to remember it
Useful logs still require minimization, restricted access, and defined retention when prompts contain sensitive information.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How to Govern AI Deployment and Use questions
- Treat retrieved instructions as data: What is the decisive risk distinction? →
- Notify responsible teams and assess affected outputs: Which communication decision best supports responsible →
- Suspend cancellation assistance and route those requests: Which response best distinguishes suspending the →
- All 424 Understanding How to Govern AI Deployment and Use questions →
Part of the Certsqill AIGP question bank · Understanding How to Govern AI Deployment and Use ·
Every answer, right and wrong, comes with its own explanation.
