IAPP Updated AIGP Exam Questions and Answers by enya

Defining the roles and responsibilities of AI stakeholders is crucial for encouraging accountability over AI systems. Clear delineation of who is responsible for different aspects of the AI lifecycle ensures that there is a person or team accountable for monitoring, maintaining, and addressing issues that arise. This accountability framework helps in ensuring that ethical standards and regulatory requirements are met, and it facilitates transparency and traceability in AI operations. By assigning specific roles, organizations can better manage and mitigate risks associated with AI deployment and use.

Conformity assessmentsare a core requirement under theEU AI Actfor high-risk systems and serve to confirm that the AI meetsregulatory, safety, and ethical standardsbefore it is put into production.

From theAI Governance in Practice Report 2025:

“Conformity assessments… ensure that systems comply with legal requirements, safety criteria, and intended purpose before being placed on the market.” (p. 34)

“They are a critical step to demonstrate safety and trustworthiness in AI deployment.” (p. 35)

The correct answer isB. " Candidate quality " isnota negative consequence of using AI—rather, it is the intendedbenefitof using such tools (e.g., more efficient filtering of strong candidates).

From the AIGP ILT Guide:

“Automation bias, disparate impact, and privacy risks are well-documented concerns in AI-assisted hiring. These risks may arise when AI models replicate biases present in training data or obscure the decision logic.”

AI Governance in Practice Report 2025 (Bias and Fairness Section) also warns:

“Improper AI use in hiring can lead to disparate impact, where neutral criteria disproportionately disadvantage protected groups.”

Candidate quality is agoal, not a risk, makingB the correct answerfor what isnota negative outcome.

===========

C is the correct statement, subject to the statutory thresholds. Article 36 of South Korea ' s AI Basic Act requires an AI business operator without an address or business office in Korea to designate a domestic representative when it meets prescribed criteria concerning users, revenue, or other specified conditions. The implementing decree establishes those thresholds, including qualifying revenue and Korean-user levels. The Act also applies extraterritorially where conduct outside Korea affects the Korean market or users. Generative AI is not categorically excluded, eliminating B. The Korean framework does not simply reproduce the EU AI Act ' s prohibited-practices regime described in D, and " frontier models " are not established as the distinct regulatory category suggested by A. Therefore, domestic-representative requirements make C the best answer.

================