Retain only data needed for the defined purpose: Which measure | AIGP
7-day money-back guarantee — full refund within 7 days of purchase if you've completed under 20% of the questions. See pricing →
Certifications Tools Flashcards Career Paths Exam Guides Blog Pricing For Teams About

Language

✓ EnglishDeutschEspañolFrançaisPortuguês
Check readiness — free →

Retain only data needed for the defined purpose: Which measure best satisfies those requirements here?

AIGP Understanding How Laws, Standards and Frameworks Apply to AI Hard

Collecting and keeping only what the defined purpose needs, with pseudonymization and retention limits, is the measure that embodies data minimization and privacy by design.

The question

A data science team wants to retain a full raw dataset of personal identifiers indefinitely in case it proves useful for future models. A privacy engineer objects on data minimization and privacy-by-design grounds. Which measure best satisfies those requirements here?

Preparing for AIGP? Take the free 5-min readiness quiz →

  1. Keep all raw identifiers but restrict access to the data science team through role-based controls.
    Plausible but wrong: access control is a valid security measure but does not reduce the data held; minimization requires not retaining unnecessary identifiers in the first place.
  2. Retain only data needed for the defined purpose, with pseudonymization and set retention limits. ✓
    Correct: limiting collection and retention to what the defined purpose requires, plus pseudonymization and retention limits, directly implements data minimization and privacy by design.
  3. Obtain broad consent covering any future AI use so indefinite retention becomes lawful.
    Plausible but wrong: broad, open-ended consent does not satisfy minimization, which limits data to what is necessary regardless of the chosen lawful basis.
  4. Encrypt the full dataset at rest so the identifiers stay protected throughout retention.
    Plausible but wrong: encryption protects confidentiality but leaves the excessive, indefinite retention untouched, so it does not achieve minimization.
The trap
Believing strong security controls (access restriction, encryption) satisfy data minimization when the excess data is still retained.

How to remember it

Collecting and keeping only what the defined purpose needs, with pseudonymization and retention limits, is the measure that embodies data minimization and privacy by design.

How many of these would you get right?

One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.

Test your AIGP readiness — free

More Understanding How Laws, Standards and Frameworks Apply to AI questions

Part of the Certsqill AIGP question bank · Understanding How Laws, Standards and Frameworks Apply to AI · Every answer, right and wrong, comes with its own explanation.