II.A · Domain II
Existing data privacy laws and AI
Not started · 0 practice questions
Applying privacy principles and controller obligations to AI systems: lawful basis, purpose limitation, minimisation, DPIAs, data-subject rights, automated decision-making and special-category data.
Domain II exam essentials →What you should be able to do
- II.A.1 Apply core privacy principles — transparency, choice, lawful basis and purpose limitation — to AI systems.
- II.A.2 Apply data minimisation and privacy by design to the development and use of AI.
- II.A.3 Map controller obligations to AI: DPIAs, processor arrangements, cross-border transfers, data-subject rights, automated decision-making rules, breach notification and record-keeping.
- II.A.4 Handle special-category and biometric data lawfully in AI contexts.
Lessons
Lessons for this competency are coming as they’re published.
The ring fills from question performance, not from reading. Finishing a lesson marks it seen (check mark); the competency is mastered only when you answer its questions correctly.