CASE STUDY

Please use the following to answer the next question:

A small local flower delivery company operates a few stores and has a limited IT budget. To reduce the time spent on customer service, which is a major drain on employee time, the company plans to implement a simple but high-performance generative AI chatbot on its website. The chatbot will provide real-time, fact-based responses to customer inquiries and assist with order processing, helping to reduce incoming phone calls.

The company currently uses a single on-premises server for its order database and email system and has not yet partnered with a cloud provider.

An internal data privacy policy governs the use of customer data. This policy, written before the adoption of AI, allows the use or transfer of customer data beyond name and contact information but requires that all such data be deleted after the order is completed. The company prefers to maintain this policy without changes.

MULTI-SELECT

Please select 3 of the 5 options below. No partial credit will be given.

Which of the following actions would necessitate a change to the company ' s privacy policy?