The vendor acts solely for the company’s documented: Which prior assumption no longer holds?
Vendor training creates an additional purpose, undermining the assumption that processing occurs solely for the company’s extraction activity.
The question
A financial-services company uses a vendor to extract fields from customer documents. The company determines extraction purposes, while the vendor contract permits retaining documents to train the vendor’s general model. Under the GDPR in the European Union, the company must reassess roles and data use before approving the clause. Which prior assumption no longer holds?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Contract language can describe permitted data handling.Contract language can describe handling, but the proposed clause reveals that actual purposes must be reassessed under the GDPR facts.
- The documents remain relevant to financial administration.Relevance to administration may remain unchanged, while the new retention and training purpose changes the processing relationship.
- The company determines the extraction purpose.The company may still determine the extraction purpose, but that does not eliminate the vendor’s separate purpose for retained data.
- The vendor acts solely for the company’s documented extraction purpose. ✓General model training is an additional vendor purpose, so the assumption of processing solely for the company’s extraction purpose no longer holds.
The trap
When a supplier reuses data for its own objective, examine whether the original processing-purpose assumption still fits. How to remember it
Vendor training creates an additional purpose, undermining the assumption that processing occurs solely for the company’s extraction activity.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How to Govern AI Deployment and Use questions
- A breach-only clause covers material model incidents: Which prior assumption no longer holds? →
- Assess access: What should the employer revisit first? →
- Termination requires immediate deletion of every related: Which prior assumption should the buyer reject? →
- All 424 Understanding How to Govern AI Deployment and Use questions →
Part of the Certsqill AIGP question bank · Understanding How to Govern AI Deployment and Use ·
Every answer, right and wrong, comes with its own explanation.