QUESTION 1

Which of the following are actual acts relating to the protection of personal information in Canada as a whole or in any province?

a. Access to Information and Privacy Protection Act

b. An Act Respecting the Protection of Personal Information in the Private Sector (Quebec)

c. Protection of Information, Privacy and Electronic Documents Act (Nova Scotia)

d. Municipal Freedom of Information and Protection of Privacy Act (ON)

e. Personal Information Protection Act (Prince Edward Island)

1 points

QUESTION 2

Which of the following are not elements of "Privacy by Design"? (Select all that apply.)

a. Providing full transparency to users

b. Using privacy defaults, notices and user-friendly options for choice

c. Providing end-to-end security

d. Managing uses of data for users

e. Providing breach notifications

1 points

QUESTION 3

Company ABC licenses software for client relationship management (CRM) and has recently launched a cloud-based CRM service that relies on that software. You work for Company 123 - a financial services company. You are responsible for negotiating a services agreement with Company ABC. It will not be easy to negotiate the rights necessary to audit Company ABC's multi-tenant infrastructure.

True

False

1 points

QUESTION 4

ABC Co. developed its newest application this past year. During its development, ABC Co.: (i) had defined security requirements; (ii) used strong safeguards to restrict access to the code to only the assigned developers; (iii) trained its development team on secure coding practices; and (iv) trained its development team on the protection of personal information.

True or False. This is a good example of the seventh principle of Privacy By Design.

True

False

1 points

QUESTION 5

There has been a security breach. Using the same framework as the Information and Privacy Commissioner of Canada uses, has there been a privacy breach?

DEF Inc. recently fired its head of information security for embezzling money that was meant to be used to review and upgrade security systems. The person appointed as acting head of information security locked down all systems immediately prior to the new head being fired, and the acting head: (i) instructed staff to change to revoke all of the fired head's authorizations; (ii) forced them to change their own passwords; and (iii) heavily encrypt the client database. The staff did this. This staff did not realize that a recently retired employee's accounts were still active. The fired head of information security used that account to gain access to the the client database.

Privacy Breach - Failure to be Proactive

Privacy Breach - Failure to be Respond

Both

No Privacy Breach

1 points

QUESTION 6

Which principles forming part of Microsoft's Artificial Intelligence Framework are being violated?

FACTS:

An AI was implemented to help with recruiting be reviewing candidates resumes. For technical roles, it screened out anyone who appeared to be female and anyone who appeared to be over the age of 40. The cause was not identified quickly because the developer of the system did not allow access to information about how the AI was making its decisions.

a. Fairness b. Reliability c. Privacy & Security d. Inclusiveness e. Transparency f. Accountability g. The Importance of Data 1 points

QUESTION 7

It is November 1989 in Ottawa, Ontario. On election night, Denver arrived at the polling station and noticed a set of four steps that led to the marked entrance. Denver looked for another entrance but there was none. Denver waited by the marked entrance until someone else arrived. Denver asked that person to ask the staff at the polling station to come outside and assist him. Two staff members came outside and lifted Denver in his weelchair into the polling station. Denver was very annoyed about having to be carried into the polling station. He resents having to ask people for help and to depend on their goodwill for access for something as fundamental as voting. Does Denver have recognized grounds for a discrimination claim based on disability?

True

False

2 points

QUESTION 8

A large online retailer has purchased a fleet of drones for package delivery, and it is using them to deliver parcels to customers around Toronto. The drones were produced by DR1 Co. The self-guided navigation system used in the drones was sold to DR1 Co. by SELFDRIVE Co. SELF DRIVE Co. purchased the base artificial intelligence system from AI Co., and to train the AI, SELFDRIVE Co. used data sets that it licensed from DATA Co. The system that is used to indicate when to drop the parcel is triggered automatically when a drone is no longer flying.

While delivering a package to 124 Elm Street, one of the drones struck a person standing on the front porch and dropped its parcel on the person. The pedestrian is badly injured.

List each legal person that the pedestrian is going to sue and explain why that person should be held accountable.

For the toolbar, press ALT+F10 (PC) or ALT+FN+F10 (Mac).

P 0 WORDS POWERED BY TINY 3 points

QUESTION 9

FACTS: ABC Co. operates a social media platform. ABC Co. makes it money by selling advertisements. The highest dollar value advertising slots are the ones linked to the most popular content. The popularity of an item of content is determined based on clicks, likes and viewing time. ABC Co. uses an AI-based algorithm to show users content that will interest them based on their past viewing behaviour and what is trending across the platform. A popular politician campaigning to become the govenor of a large state has a record of using his account on ABC Co.'s social media platform to spread false claims. ABC Co.'s administrators have already deleted posts. They have issued warnings to the politician that making false claims is a violation of the terms of use. The politician keeps posting false and inflamatory comments about the other candidate.These posts are hugely popular.

(1) What actions could ABC Co. take to comply with paragraph 5.1. of Principle 1 of the Responsible AI Framework?

(2) Pick one of the proposed actions, and analyse it using a virtue-based framework (as described in Week 01). Refer to at least two virtues and each one's corresponding pair of vices