What additional obligations must the bank fulfill prior to deployment?

An EU bank intends to launch a multi-modal Al platform for customer engagement and automated decision-making assist with the opening of bank accounts. The platform has been subject to thorough risk assessments and testing, where it proves to be effective in not discriminating against any individual on the basis of a protected class.

What additional obligations must the bank fulfill prior to deployment?
A . The bank must obtain explicit consent from users under the privacy Directive.
B . The bank must disclose how the Al system works under the Ell Digital Services Act.
C . The bank must subject the Al system an adequacy decision and publish its appropriate safeguards.
D . The bank must disclose the use of the Al system and implement suitable measures for users to contest automated decision-making.

View Answer

Answer: D

Explanation:

Under the EU regulations, particularly the GDPR, banks using AI for decision-making must inform users about the use of AI and provide mechanisms for users to contest decisions. This is part of ensuring transparency and accountability in automated processing. Explicit consent under the privacy directive (A) and disclosing under the Digital Services Act (B) are not specifically required in this context. An adequacy decision is related to data transfers outside the EU (C).