An AI governance team is conducting a privacy risk assessment for a new AI-powered employee monitoring system that tracks keystrokes, screen content, and application usage to detect potential insider threats. Which privacy principle is MOST threatened?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Here's the deal — a is correct because keystroke logging and full screen content capture are highly invasive and collect substantially more data than needed to detect insider threats. Insider threat detection can often be accomplished with less invasive signals such as access logs, anomalous data transfer patterns, and login behavior.
Full explanation below image
Full Explanation
A is correct because keystroke logging and full screen content capture are highly invasive and collect substantially more data than needed to detect insider threats. Insider threat detection can often be accomplished with less invasive signals such as access logs, anomalous data transfer patterns, and login behavior. Capturing all keystrokes and screen content violates the data minimization principle. Purpose limitation (B) is not violated in this scenario since the data is used for the stated purpose. Accuracy (C) and storage limitation (D) may be concerns but are not the most threatened privacy principle given the scope of collection described.