AI0-001 AI Implementation and Operations Practice Question
A company operating in the EU must comply with GDPR. An AI model processes personal data for customer segmentation. Which of the following ensures compliance?
⚠ Common exam trap
CompTIA often tests the misconception that pseudonymization or simple aggregation is sufficient for GDPR compliance, when in fact only irreversible anonymization (where no individual can be re-identified) removes data from GDPR scope, and the right to deletion must still be explicitly supported for any remaining personal data.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Implement data anonymization and allow users to request deletion.
GDPR mandates that personal data must be processed lawfully, with data minimization and the right to erasure. Implementing data anonymization removes personally identifiable information (PII) so the data is no longer considered personal data under GDPR, and allowing users to request deletion directly satisfies the 'right to be forgotten' (Article 17). This approach ensures compliance by both protecting individual privacy and providing a mechanism for data subjects to exercise their legal rights.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Obtain explicit consent once and use data indefinitely.
Why it's wrong here
Consent must be specific and can be withdrawn; indefinite use is not allowed.
- ✗
Store personal data permanently for model improvement.
Why it's wrong here
GDPR mandates data minimization and right to erasure, so permanent storage violates these principles.
- ✗
Use only aggregated data without any individual records.
Why it's wrong here
Aggregated data may still be considered personal if individuals can be re-identified, and it might not meet business needs.
- ✓
Implement data anonymization and allow users to request deletion.
Why this is correct
Anonymization reduces privacy risk, and deletion capability ensures compliance with GDPR rights.
About these practice questions
Courseiva writes every AI0-001 question from scratch — 754 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AI0-001 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI0-001 exam.