A healthcare-related AI application needs a retention and deletion policy for input and output logs.
Keep evidence needed for audits but do not keep personal data indefinitely.
Which policy is appropriate?
Define retention, access, deletion, and exception procedures from legal, contractual, audit, and privacy requirements.
Detailed explanation
The policy preserves necessary evidence while removing data after its purpose ends.
The policy preserves necessary evidence while removing data after its purpose ends.
This is excessive retention and weak access control.
This is excessive retention and weak access control.
Required evidence could be lost.
Required evidence could be lost.
Temperature is an inference setting, not a retention control.
Temperature is an inference setting, not a retention control.
Try it yourself
An example you can run in a temporary verification environment.
AWS公式AIF-C01ガイドのDomain 5.2とAWSログ・データ保持の公式説明を確認する。Expected result
保持期間を無期限・一律で決めず、要件とデータ最小化を両立する説明ができる。Key points
- Retention
- Deletion
- Audit
Notes
- Environment: AWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認
- Command output formatting can vary slightly by distribution or tool version.
- Run the example in a temporary directory or process when possible.
Foundation review
Read the scope first
Check whether the command acts on the current shell, a new process, an existing process, or a file.
Verify the observable result
Use the supplied command and compare the output with the expected result.