Courseiva
AI Governance and Ethics →mediumMultiple Choice

AI0-001 AI Governance and Ethics Practice Question

A company using an AI-based hiring tool receives a candidate request for explanation of an automated rejection. Which GDPR principle is most directly relevant?

⚠ Common exam trap

AI0-001 often tests the confusion between the right to access (Article 15) and the right to explanation (Article 22/Recital 71), leading candidates to pick 'right to access' when the question specifically asks about explaining an automated decision.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Right to explanation

GDPR Article 22 grants individuals the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects, and Recital 71 explicitly references the right to obtain an explanation of such decisions. A hiring rejection is a significant decision, so the candidate's request for explanation maps directly to the right to explanation (often framed as part of Article 22 safeguards).

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✗

    Right to erasure

    Why it's wrong here

    Erasure removes personal data when grounds such as withdrawal of consent apply; it does not compel an explanation of how an automated rejection was reached. It tempts because both are data subject rights, yet Article 22 specifically addresses solely automated decisions, requiring meaningful information about the logic and the right to contest.

  • ✗

    Right to data portability

    Why it's wrong here

    Portability covers receiving personal data in a structured, machine-readable format for transfer to another controller, not contesting an automated decision. It tempts because both are data subject rights under GDPR, but Article 22 requires meaningful information about the logic involved in the rejection, which portability does not provide.

  • ✗

    Right to access

    Why it's wrong here

    Access provides a copy of personal data and confirmation of processing, not the specific logic behind an automated decision. It tempts because access and Article 22 transparency overlap, but the stem asks about explanation of the rejection itself, which Article 22 safeguards through human intervention and contestation rights.

  • ✓

    Right to explanation

    Why this is correct

    Automated rejection decisions fall under GDPR Article 22, which grants data subjects the right to meaningful information about the logic involved and to contest the outcome. The right to explanation directly satisfies the candidate's request for the reasoning behind the hiring tool's decision.

About these practice questions

This AI0-001 question is part of Courseiva's 962-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed September 2026 · checked against the official CompTIA exam blueprint

This AI0-001 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI0-001 exam.