CASE STUDYA company is considering the procurement of an AI system designed to enhance the...

Vendor: IAPP
Product: AIGP
Update on: May 2, 2026
Questions: 194

IAPP AIGP Question Answer

CASE STUDY

A company is considering the procurement of an AI system designed to enhance the security of IT infrastructure. The AI system analyzes how users type on their laptops, including typing speed, rhythm and pressure, to create a unique user profile. This data is then used to authenticate users and ensure that only authorized personnel can access sensitive resources.

The data processed by the AI system would be classified as:

Non-sensitive personal data, since it does not reveal information about health, gender or race

Organizational data, since it is part of the authentication process

Non-personal data, as long as it is not linked to a user ID

Special category data, if it can be used to uniquely identify a person