Define the minimum fields needed for invoice matching: What evidence should resolve approval?
Define necessary fields before collection; encryption, redaction, or shorter retention does not cure excessive initial collection.
The question
Before an EU financial-services processor, subject to the GDPR, collects documents for invoice matching, the model team requests full account statements although only invoice identifiers appear necessary. What evidence should resolve approval?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Retain complete statements under a shorter internal deletion scheduleShorter retention reduces duration but leaves the initial collection broader than the stated invoice-matching need.
- Collect complete statements, then redact unused fields during trainingLater redaction does not justify collecting unnecessary information when the processing need can be defined beforehand.
- Ask the supplier to encrypt all statements before model ingestionEncryption protects confidentiality but does not determine whether collecting full statements is necessary or proportionate.
- Define the minimum fields needed for invoice matching ✓Identifying necessary fields before collection directly applies minimization and prevents gathering unrelated financial information.
The trap
Ask what fields are necessary for the stated purpose before considering encryption, retention, or later redaction. How to remember it
Define necessary fields before collection; encryption, redaction, or shorter retention does not cure excessive initial collection.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How Laws, Standards and Frameworks Apply to AI questions
- A comparison of consent voluntariness and alternative: What evidence should resolve the uncertainty? →
- Run a realistic reidentification test: What evidence should resolve whether the data are anonymized? →
- Document each party’s purposes and means: What evidence should resolve the parties’ roles? →
- All 394 Understanding How Laws, Standards and Frameworks Apply to AI questions →
Part of the Certsqill AIGP question bank · Understanding How Laws, Standards and Frameworks Apply to AI ·
Every answer, right and wrong, comes with its own explanation.