Session 3 answer key and debrief questions
Part A model answer
Recommended: More evidence and consultation first, OR limited pilot with no upload of real registration data until DPIA, data-sharing agreement, and tool approval complete.
Red flags: Names + vulnerability + unapproved platform + sector training on data.
Part B
Charter should explicitly exclude live beneficiary data in pilot phase; use synthetic or public sample only. Owner: CDAO, CTO, or delegated data lead. Stop threshold: any unauthorized processing or inability to delete data.
Part C
Strong answers name how frontline staff would be expected to explain AI decisions to beneficiaries, or how policy lead flags legal basis gap.
Debrief questions
- What would real consultation include that we did not do today?
- When is “no AI for now” the strongest leadership decision?
- What is one field your charter would need before your executive would sign?
Rubric
| # | Look for |
|---|---|
| 1 | Red or amber for upload; not green |
| 2 | Names vendor/tool checks or legal review |
| 3 | Subgroup or vulnerability mentioned |
| 4 | Owner + stop/exit in charter |