Week 4 self-check | AI GRCA Practice Lab

WEEK 4 · Foundations, harm & law · AI and the Wider Legal Landscape

Why does this course emphasise that 'AI law is broader than privacy'?

Because other legal domains are always less important than privacyBecause privacy law is the only relevant domain in practiceBecause IP, equality, consumer, contract, liability and sector law can all independently create AI risk, beyond data protectionBecause privacy law doesn't apply to AI at all

WEEK 4 · Foundations, harm & law · AI and the Wider Legal Landscape

'Credit and lending fairness' as a legal concern most directly relates to:

Only data retention periodsOnly marketing contentEqual and fair treatment of applicants in automated credit or lending decisionsOnly cybersecurity practices

WEEK 4 · Foundations, harm & law · AI and the Wider Legal Landscape

Sector regulation for a financial services AI tool would most likely add requirements around:

Only physical workplace safetyOnly employment contractsOnly general marketing practices with no sector specificityFinancial-services-specific obligations, such as fair lending or model risk management practices

WEEK 4 · Foundations, harm & law · AI and the Wider Legal Landscape

'Professional negligence' is most relevant to AI when:

Only when no AI is involved at allOnly applies to unpaid workOnly applies to open-source AIA professional (e.g. adviser) relies on AI output without appropriate care, causing harm through a failure of professional duty

WEEK 4 · Foundations, harm & law · AI and the Wider Legal Landscape

An AI product giving unsafe advice (e.g. on medication dosage) primarily engages which combination of legal domains?

Only database rightsProduct liability and health and safety law togetherOnly trade secretsOnly procurement law

WEEK 4 · Foundations, harm & law · AI and the Wider Legal Landscape

Why does 'record keeping' matter as a distinct legal concern for AI systems?

Certain legal and regulatory obligations require retaining specific records or evidence of decisions and processesRecord keeping is purely a matter of internal preference with no external requirement everOnly applies to financial services firmsRecords are never legally relevant

WEEK 4 · Foundations, harm & law · AI and the Wider Legal Landscape

A supplier's model was trained on scraped web content without clear licensing. This primarily raises a concern under:

Only health and safety lawCopyright and training data lawOnly employment lawOnly procurement law

WEEK 4 · Foundations, harm & law · AI and the Wider Legal Landscape

Why is a privacy review alone insufficient for a generative marketing tool?

IP, consumer protection, equality and contract risks can arise independently of data protectionMarketing content can't create legal riskOnly cybersecurity mattersPrivacy law covers everything already