Treat the exposure as a privacy risk: Which interpretation is most appropriate?
Sensitive information in logs is a privacy and security risk independent of response accuracy or booking behavior.
The question
For this EU travel-support deployment, applicable EU AI Act obligations and internal controls apply. Prompt logs contain passport numbers. Responses remain accurate, and no unauthorized booking occurred. Which interpretation is most appropriate?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Investigate the logging exposure.Investigation is appropriate, but the observed issue should be classified as a privacy and security exposure rather than merely an open inquiry.
- Treat the exposure as a privacy risk. ✓Passport numbers in logs create a privacy and information-security risk independent of response accuracy or booking authorization.
- Treat it as a booking-control failure and tighten transaction permissions, despite no unauthorized booking.Transaction controls address unauthorized actions, not the demonstrated exposure of passport numbers in prompt logs.
- Treat it as a retention issue only.Retention is relevant, but access, handling, disclosure, monitoring, and incident response also affect the risk.
The trap
Classify the observed harm itself; accurate output does not neutralize sensitive-data exposure. How to remember it
Sensitive information in logs is a privacy and security risk independent of response accuracy or booking behavior.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How to Govern AI Deployment and Use questions
- Treat retrieved instructions as data and constrain: What does the evidence support? →
- Escalate the incident through the designated response: What communication action is indicated? →
- Suspend automated intake and use verified manual intake: What response best fits? →
- All 424 Understanding How to Govern AI Deployment and Use questions →
Part of the Certsqill AIGP question bank · Understanding How to Govern AI Deployment and Use ·
Every answer, right and wrong, comes with its own explanation.