A city is building a resident AI chatbot that will process service…

Question

A city is building a resident AI chatbot that will process service requests containing personal data. Which secure-design principle should be baked into the project from the first architecture reviews?

Accepted Answer

Privacy by design, minimizing collected personal data and embedding protections throughout the chatbot lifecycle — When a chatbot will hear residents' personal stories, privacy cannot be a sticker added at go-live. Privacy by design means collecting less, protecting what must be kept, and wiring that in from the first whiteboard sketch.

Answer

Shared responsibility that transfers all privacy duties solely to the cloud email vendor

Answer

SASE as the only control needed because branch offices will later evaluate it

Answer

Security through obscurity by hiding the chatbot URL from search engines alone

A city is building a resident AI chatbot that will process service requests containing personal data. Which secure-design principle should be baked into the project from the first architecture reviews?

Short Explanation

Full Explanation