Data Ethics & Privacy Flashcards
7 cards from real DAC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Data Ethics & Privacy flashcards as text
What does 'data provenance' refer to in the context of data ethics and governance?
Answer: The documented history of where data came from, how it was transformed, and who accessed it
Data provenance tracks the origin, movement, and transformation of data over time, providing transparency and accountability that are critical for ethical data use.
An analytics team wants to test a new recommendation algorithm on users without informing them. Which ethical principle does this most clearly violate?
Answer: Autonomy and informed consent
Using individuals as test subjects without their knowledge violates their autonomy and the principle of informed consent, as they have not agreed to participate in the experiment.
Which concept refers to an individual's right to have their personal data permanently deleted from an organization's systems?
Answer: Right to erasure (Right to be forgotten)
The right to erasure, also called the 'right to be forgotten,' allows individuals to request permanent deletion of their personal data when it is no longer necessary or when consent is withdrawn.
In responsible AI and data ethics, what is 'explainability'?
Answer: The capacity of an AI system to provide understandable reasons for its decisions or predictions
Explainability refers to the degree to which an AI model's decisions can be understood and interpreted by humans, which is critical for accountability and trust.
A healthcare analytics firm in the US transfers patient data to a research partner in Europe. Which framework primarily governs the European partner's handling of this data?
Answer: GDPR
GDPR (General Data Protection Regulation) applies to organizations that process personal data of EU residents, regardless of where the organization is located.
What is the primary purpose of a 'Privacy Impact Assessment' (PIA) in data analytics projects?
Answer: To evaluate how a project may affect individuals' privacy and identify risks before implementation
A PIA systematically assesses how a project or system might impact personal privacy, identifies potential risks, and determines mitigation strategies before the project is deployed.
Which of the following scenarios best illustrates 'data re-identification'?
Answer: Combining anonymized datasets with external information to identify specific individuals
Data re-identification occurs when supposedly anonymized data is combined with auxiliary datasets (such as public records) to link data back to specific individuals, undermining privacy protections.