1. Cambridge Analytica obtained Facebook profile data from approximately how many users — and through what mechanism?
Correct. The quiz app — developed by researcher Aleksandr Kogan — used Facebook's then-permissive API to harvest data not only from 270,000 people who installed it, but from their friends' networks, reaching approximately 87 million profiles.
Incorrect. The Cambridge Analytica data harvest reached approximately 87 million users through a quiz app that exploited Facebook's API permissions to access not just installers' data but their entire friend networks' data as well.
2. What percentage of extremist group joins did Facebook's internal 2019 study find were driven by its own recommendation tools?
Correct. Facebook's own 2019 internal research found that 64% of extremist group joins were attributable to the platform's own recommendation features.
Not quite. The figure documented in Facebook's internal 2019 study was 64% — a majority of extremist group membership driven by the platform's own recommendation tools.
3. The through-line from Lessons 1-4 is that ethical AI requires:
Correct.
Ethics is about deliberate value choice at every stage: data, design, commissioning, deployment.
4. "Check-box compliance" in human oversight of AI systems describes:
Correct. Check-box compliance — reviewers approving algorithmic outputs without substantive independent evaluation, typically due to time pressure and high caseloads — provides accountability in form without accountability in substance.
Incorrect. Check-box compliance describes the phenomenon in which human reviewers fulfill the formal requirement of oversight without performing substantive evaluation — giving the appearance of accountability without its substance.
5. Staged deployment of AI systems is only effective if:
Correct.
Staged deployment only works if it can actually delay or block full deployment when problems are found.
6. The Gender Shades study (MIT, 2018) found error rate gaps of up to how many percentage points between the best- and worst-performing demographic groups in commercial facial analysis?
Correct. IBM's system misclassified 34.7% of darker-skinned women vs. 0.3% of lighter-skinned men — a gap of approximately 34 percentage points.
Incorrect. The gap was approximately 34 percentage points — IBM's system had a 34.7% error rate on darker-skinned women versus 0.3% on lighter-skinned men.
7. What historical analogy do researchers use to contextualize the long-term democratic adaptation required by AI?
Correct. Researchers draw the analogy to printing, radio, and television — each disrupted democratic information ecosystems and over time prompted new institutions (public broadcasting, campaign finance law) that helped restabilize democratic discourse.
Not quite. Researchers compare AI's democratic disruption to the printing press, radio, and television — technologies that each eventually prompted new democratic institutions over decade-long timescales, suggesting AI will require similar long-term institutional innovation.
8. In the USS Vincennes incident (1988), what does the case illustrate about human oversight of autonomous systems?
Correct. Vincennes demonstrates that nominal human authorization (Rogers gave the order) is not the same as meaningful human control when the information environment is mediated by an autonomous system and deliberation time is effectively zero.
Incorrect. Vincennes illustrates the gap between nominal and meaningful human control: the human technically authorized the action, but the conditions for genuine deliberation — accurate information, sufficient time, freedom from pressure — were not present.
9. In the 2019 Google-Ascension "Project Nightingale" case, what was the central ethical concern, even if the arrangement was arguably legally compliant under HIPAA?
Correct. Project Nightingale illustrated that HIPAA compliance is a legal floor, not an ethical ceiling. Patients reasonably expect to know when their detailed medical records — including diagnoses and hospitalizations — are being shared with commercial technology companies to build AI products.
Incorrect. The central concern was patient notification: 50 million patients had their identifiable records shared with Google without being told. Legal arguments under HIPAA's operations exception were contested, but even if compliant, the arrangement violated patient expectations about data use.
10. What does "regulatory arbitrage" mean in the context of international AI governance, and which case from this module best illustrates it?
Correct. Regulatory arbitrage in AI governance is the strategic use of permissive jurisdictions. Clearview AI's continued U.S. operation while refusing European compliance obligations is the clearest example from this module.
Incorrect. Regulatory arbitrage is about exploiting jurisdictional differences — operating in permissive jurisdictions to avoid stricter ones. Clearview AI's refusal to comply with European orders while operating freely in the U.S. is the textbook example from this module.
11. The trade secret protection Northpointe claimed over the COMPAS algorithm meant that:
Correct. The algorithm's source code remained a trade secret throughout the litigation and public debate — meaning judicial review of COMPAS-influenced sentences proceeded without any court ever independently examining the model's mechanics.
Incorrect. Northpointe's trade secret claim meant no court — including the Wisconsin Supreme Court in State v. Loomis — had access to the algorithm's actual source code.
12. In the image recognition case from the module introduction, the bias resulted from:
Correct.
The bias was encoded in data collection and labeling decisions, not in the algorithm itself.
13. Which AI companion app's 2023 feature restriction triggered widespread user grief responses documented in The Guardian and The Atlantic?
Correct. Replika's February 2023 restriction of intimate relationship features following Italian regulator pressure led to documented user grief responses.
It was Replika, whose intimate relationship feature restrictions in February 2023 triggered grief responses in users who had formed deep emotional bonds with AI personas.
14. What was the outcome of the Clearview AI enforcement actions across multiple jurisdictions, and what governance failure does it illustrate?
Correct. Clearview refused to pay most fines and argued it had no legal presence in fining jurisdictions. It continued to operate in the U.S. where no equivalent federal law existed — illustrating the core jurisdictional enforcement gap in AI governance.
Incorrect. Clearview refused most fines and continued operating, demonstrating that without physical legal presence in a jurisdiction, regulatory fines lack enforcement mechanisms — a critical gap in international AI governance.
15. What was Cambridge Analytica's core method for building voter profiles for political microtargeting?
Correct. Cambridge Analytica harvested data through a Facebook quiz app exploiting the Graph API, then applied OCEAN psychographic modeling to build personality profiles used to target political messages to psychological vulnerabilities.
Not quite. Cambridge Analytica's method was harvesting Facebook data via a personality quiz app (exploiting the Graph API to collect friend network data without consent) and then applying OCEAN psychographic models to build voter profiles.
16. Amazon's AI recruiting tool was scrapped in 2018. What type of autonomous system failure does it exemplify?
Correct. Amazon's tool was trained on historical hiring data from a male-dominated industry, learning to associate male characteristics with hiring success — a classic specification failure where the proxy objective diverged from the true goal.
Incorrect. This is a specification failure. The system was optimizing for the wrong thing — resemblance to historical hires rather than actual candidate quality — and that historical data encoded gender bias.
17. Jason Allen's AI-generated image Théâtre d'Opéra Spatial won first place at which competition?
Correct. Allen submitted the Midjourney-generated image to the Colorado State Fair fine arts competition in 2022, where it won first place in the digital arts category.
It was the Colorado State Fair fine arts competition in 2022, where Allen's Midjourney-generated image won first place in digital arts.
18. Which of the following is a valid component of legally meaningful consent?
Correct. Specificity is one of the four required components of valid consent. Blanket consent to "anything we might ever do" does not meet the standard of specific, informed agreement.
Incorrect. Valid consent must be informed, voluntary, specific, and revocable. "Permanent," "comprehensive," and "presumptive" are all characteristics of consent frameworks that fail the legal standard.
19. Chicago's Strategic Subject List (the "heat list") scored individuals on a scale of 0–500 using inputs that included which factor — one that was directly criticized as embedding prior bias?
Correct. Using arrests (not convictions) meant the model encoded where police had previously focused — over-policed communities generated more arrest records, producing higher scores independent of actual behavior.
Incorrect. Arrests — not convictions — were a primary input, and critics noted this embedded the history of biased policing directly into the algorithmic scoring.
20. In predictive policing, feedback loop bias is structurally distinct from most machine-learning bias because:
Correct. The unique structure is that prediction → patrol deployment → increased crime recording → confirmatory future training data. The algorithm influences its own future training environment.
The structural distinctiveness is the closed loop between prediction and data collection — deploying based on a prediction changes what data is recorded in that location.